Runaway queries in BIND
I have a Fedora Core 4 box which I joined to my Win2003 ADS domain using winbind. I also managed to configure named as a secondary name server to accept zone updates from the Win2003 domain controller DNS service. The Fedora box also doubles as a Samba server to which the Win2003 file areas are backed up each night in the small hours.
Named is configured to log to two log files - one which logs issues (event.log) and the other which is a straight query log (query.log).
Everything has been running fine for about a month, but now when I look in /var/named/chroot/var/named, I see the query.log is going haywire, and is fillling up with about 200 requests every second from 127.0.0.1 all similar to the following:
04-Nov-2005 23:04:32.339 queries: info: client 127.0.0.1#33202: query: dc1-winsvr03.domain.local IN AAAA +
These are interspersed at a much lower frequency with messages similar to the following:
04-Nov-2005 23:04:32.466 queries: info: client 127.0.0.1#33202: query: _kerberos-master._udp.DOMAIN.LOCAL IN SRV +
I've tried the simple stuff, such as restarting named, rebooting the box, but to no avail. There is nothing in event.log to point to a problem, but I can't help thinking that this means something has gone wrong somewhere!
Can anyone tell me a) what is causing this, and b) how I stop it without rebuilding the box from scratch please (which is the only way I managed to cure it last time).
Many thanks
|