Hi J.
I'm not sure what the cause of the URLs is, but I can confirm I'm seeing
the same URLs in my own logs. The queries originate from multiple
devices on my internal network - all Apple devices I think.
My advice: I wouldn't waste too much effort trying to solve this one, as
it is almost certainly something that you will have no control over.
E.g. It could be something bogus on a web page that these devices have
all accessed?
Nick.
On 4/11/23 11:30, J Doe wrote:
Hello,
On a Bind 9.18.19 server configured as a recursive resolver, I
sometimes see URL's being noted in the log files.
One such example is:
02-Nov-2023 23:32:19.435 lame-servers: info: success resolving
'https://app-measurement.com/sdk-exp/A' after disabling qname
minimization due to 'ncache nxdomain'
This seems unusual to me because Bind usually notes the domain name it
is attempting to resolve, not an URL. In this particular case, I
would expect to see a notation about "app-measurement.com" and not
"http://etc".
What is the significance of logging the URL and why does this happen
in only some cases ?
Thanks,
- J
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users