Package: logcheck-database
Version: 1.2.62
Severity: normal
Tags: patch

When using the delegation-only feature of bind, it logs any offending
lookup that it forced to NXDOMAIN.
the following rule should be added to ignore.d.server/bind to ignore these:
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ named\[[0-9]+\]: enforced delegation-only 
for '[[:alnum:]]+' \([._[:alnum:]-]+/(A|AAAA)/IN\) from [0-9a-f.:]+#[0-9]+$

I had this in ignore.d.server/local-bind for quite a while and had to
add the AAAA now which reminded me to submit it. :)

elmar

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

-- debconf information excluded

-- 

 .'"`.                                                            /"\
| :' :   Elmar Hoffmann <[EMAIL PROTECTED]>    ASCII Ribbon Campaign  \ /
`. `'    GPG key available via pgp.net        against HTML email   X
  `-                                                    & vCards  / \

Attachment: signature.asc
Description: Digital signature

_______________________________________________
Logcheck-devel mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/logcheck-devel

Reply via email to