請教 BIND 的記錄檔問題 - Linux

By Adele
at 2013-09-26T01:20
at 2013-09-26T01:20
Table of Contents
請教各位大大,最近我的 DNS 遭到攻擊,於是打開記錄檔:
channel QueryLog
{
file "/var/log/named.query.log" versions 10 size 1m;
severity info;
print-severity yes;
print-time yes;
print-category yes;
};
category queries
{
QueryLog;
};
節錄記錄檔如下:
DD-mmm-2013 22:41:24.049 queries: info: client 216.155.134.184#50788: view
Internet: query: . IN ANY +E
^^^^
如上標示,有時卻會是一個 "+" 或一個 "-",這些都是什麼意思呢?
另外還有:
DD-mmm-2013 23:27:46.801 queries: info: client 192.168.254.xxx#32839: view
Intranet: query: 86.45.10.121.in-addr.arpa IN PTR +
內部網段 (含本機) 不斷發出上列查詢產生記錄,一秒鐘達數十次,這又是什麼呢?
另外附註說明,我的 DNS 為唯 master,對內提供 forward 與遞迴查詢,
對外則僅解析本網域,雖不提供遞迴,但可轉發。
--
邊提供協助,邊鍛鍊自己...
--
Tags:
Linux
All Comments

By Isla
at 2013-09-28T18:04
at 2013-09-28T18:04

By Jack
at 2013-10-03T11:21
at 2013-10-03T11:21
Related Posts
有辦法查看函式被誰呼叫嗎?

By Iris
at 2013-09-25T14:55
at 2013-09-25T14:55
Debian/Ubuntu 上好用的 Spotify 網路音樂串流

By Damian
at 2013-09-25T11:53
at 2013-09-25T11:53
ubuntu(vm)在SSD上是否需要 Trim 等設定

By Ida
at 2013-09-25T11:42
at 2013-09-25T11:42
網卡自動降速?

By Mary
at 2013-09-25T11:26
at 2013-09-25T11:26
apt-get upgrade後gcin異常

By Edwina
at 2013-09-24T21:45
at 2013-09-24T21:45