[Logcheck-devel] Bug#446356: does not ignore bind enforced delegation-only messages
Elmar Hoffmann
elho at elho.net
Fri Oct 12 13:13:24 UTC 2007
Package: logcheck-database
Version: 1.2.62
Severity: normal
Tags: patch
When using the delegation-only feature of bind, it logs any offending
lookup that it forced to NXDOMAIN.
the following rule should be added to ignore.d.server/bind to ignore these:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: enforced delegation-only for '[[:alnum:]]+' \([._[:alnum:]-]+/(A|AAAA)/IN\) from [0-9a-f.:]+#[0-9]+$
I had this in ignore.d.server/local-bind for quite a while and had to
add the AAAA now which reminded me to submit it. :)
elmar
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.22
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
-- debconf information excluded
--
.'"`. /"\
| :' : Elmar Hoffmann <elho at elho.net> ASCII Ribbon Campaign \ /
`. `' GPG key available via pgp.net against HTML email X
`- & vCards / \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20071012/1845a5eb/attachment.pgp
More information about the Logcheck-devel
mailing list