syslog-ng & DNS
 

Hi, All!

Please, need help!

I have a server:
Linux Centos 5.1 kernel 2.6.18-53.1.21.el5
And there are two services.
Bind 9.3.3rc2
syslog-ng 2.0.9

Also a have some routers and managed switches:
Cisco 2801, Cisco 2950 and some other
D-Link DES-3208, D-Link DGS-3612G

Config files:
#syslog-ng.conf
options {
sync (0);
time_reopen (0);
log_fifo_size (10000);
long_hostnames (off);
use_dns (yes);
use_fqdn (no);
dns_cache (yes);
create_dirs (yes);
keep_hostname (yes);
};
source r_hosts { udp ( ip(0.0.0.0)port(514) );};
destination r_log { file ("/$HOST/$DAY-$HOST"); };
log {source (r_hosts);destination (r_log);};


#resolv.conf
search domain.my
nameserver 127.0.0.1


#forward.zone
$ORIGIN domain.my.
cisco2801 A 10.10.10.1
dlink3028 A 10.10.10.2


#reverse.zone
$ORIGIN 10.10.10.in-addr.arpa.
1 PTR cisco2801
2 PTR dlink3028


Nslookup returns:
[root@ns /]# nslookup cisco2801
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: cisco2801.domain.my
Address: 10.10.10.1

[root@ns /]# nslookup dlink3028
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: dlink3028.domain.my
Address: 10.10.10.2

[root@ns /]# nslookup 10.10.10.1
Server: 127.0.0.1
Address: 127.0.0.1#53
1.10.10.10.in-addr.arpa name = cisco2801.domain.my

[root@ns /]# nslookup 10.10.10.2
Server: 127.0.0.1
Address: 127.0.0.1#53
2.10.10.10.in-addr.arpa name = dlink3028.domain.my


On all switces and routers (Cisco, D-Link) configured to log messages to server CentOS.
They do it successfully, and server sorts logs and puts its to files and catalogues.

Server creates dirs and files with the NAMES REGISTERED in reverse zone file for cisco logs :

cisco2801
|- 19-cisco2801
|- 20-cisco2801

But for D-Link only IPs (Does not matter what you typed in revers zone file)

10.10.10.2
|- 19-10.10.10.2
|- 20-10.10.10.2

I tryed to change IPs and names in reverse zone for D-Link and Cisco but without success.
What is the problem? DNS, syslog-ng, D-Link?