LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-23-2008, 11:26 PM   #1
iakor
LQ Newbie
 
Registered: Jun 2008
Posts: 1

Rep: Reputation: 0
Exclamation syslog-ng & DNS


Hi, All!

Please, need help!

I have a server:
Linux Centos 5.1 kernel 2.6.18-53.1.21.el5
And there are two services.
Bind 9.3.3rc2
syslog-ng 2.0.9


Also a have some routers and managed switches:
Cisco 2801, Cisco 2950 and some other
D-Link DES-3208, D-Link DGS-3612G

Config files:
#syslog-ng.conf
options {
sync (0);
time_reopen (0);
log_fifo_size (10000);
long_hostnames (off);
use_dns (yes);
use_fqdn (no);
dns_cache (yes);
create_dirs (yes);
keep_hostname (yes);
};
source r_hosts { udp ( ip(0.0.0.0)port(514) );};
destination r_log { file ("/$HOST/$DAY-$HOST"); };
log {source (r_hosts);destination (r_log);};



#resolv.conf
search domain.my
nameserver 127.0.0.1


#forward.zone
$ORIGIN domain.my.
cisco2801 A 10.10.10.1
dlink3028 A 10.10.10.2



#reverse.zone
$ORIGIN 10.10.10.in-addr.arpa.
1 PTR cisco2801
2 PTR dlink3028



Nslookup returns:
[root@ns /]# nslookup cisco2801
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: cisco2801.domain.my
Address: 10.10.10.1

[root@ns /]# nslookup dlink3028
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: dlink3028.domain.my
Address: 10.10.10.2

[root@ns /]# nslookup 10.10.10.1
Server: 127.0.0.1
Address: 127.0.0.1#53
1.10.10.10.in-addr.arpa name = cisco2801.domain.my

[root@ns /]# nslookup 10.10.10.2
Server: 127.0.0.1
Address: 127.0.0.1#53
2.10.10.10.in-addr.arpa name = dlink3028.domain.my



On all switces and routers (Cisco, D-Link) configured to log messages to server CentOS.
They do it successfully, and server sorts logs and puts its to files and catalogues.

Server creates dirs and files with the NAMES REGISTERED in reverse zone file for cisco logs :

cisco2801
|- 19-cisco2801
|- 20-cisco2801


But for D-Link only IPs (Does not matter what you typed in revers zone file)

10.10.10.2
|- 19-10.10.10.2
|- 20-10.10.10.2


I tryed to change IPs and names in reverse zone for D-Link and Cisco but without success.
What is the problem? DNS, syslog-ng, D-Link?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Syslog and Massive amount of DNS requests... ddenton Linux - Server 3 09-10-2007 08:36 AM
syslog-ng & subnet filters koncept Linux - Software 5 05-23-2007 03:38 PM
logrotate, syslog-ng & cron hattori.hanzo Linux - Newbie 1 11-08-2006 12:08 PM
syslog error - DHCP or DNS problem ? czezz Linux - Networking 2 06-19-2006 04:28 PM
Syslog and DNS ddelao Linux - Networking 3 04-30-2005 08:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 04:44 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration