Hi

I've noticed a strange effect in my bind logs, which appears to be 
certain applications tacking the search list onto a FQDN and doing a 
simultaneous AAAA query on this and the correct address. Same effect on 
three different Debian Etch machines. I'm running Bind9 on a small local 
network, forwarding external queries (although not sure if that's 
relevant at this stage).

/etc/resolv.conf:

search mydomain.co.uk
nameserver 192.168.1.30


$ssh machine.mydomain.co.uk

results in four queries:

machine.mydomain.co.uk.mydomain.co.uk IN AAAA +
machine.mydomain.co.uk IN AAAA +
machine.mydomain.co.uk IN A +
machine.mydomain.co.uk IN A +

Exim doing something similar:

smtp.mailservice.co.uk.mydomain.co.uk IN AAAA +
smtp.mailservice.co.uk IN AAAA +

With my limited understanding, although this is likely harmless (man in 
the middle?), it shouldn't be happenning with no ndots spec change, and 
it's related to IPv6.

Other info:

$lsmod |grep -i ipv6
ipv6                  226272  58


Changing search to domain makes no difference.


Any help much appreciated.

Cheers

Tim

-- 
Dorset LUG: http://dorset.lug.org.uk/  irc://irc.blitzed.org:6667/dorset
List info: https://mailman.lug.org.uk/mailman/listinfo/dorset
Next meeting: Dorchester, Tuesday 2009-05-05 20:00

Reply via email to