resolver priming query complete
Hi,
I'm trying to find out what causes named 9.16.20 to print this log
message "resolver priming query complete" in irregular intervals.
The problem had been reported some time ago
(https://gitlab.isc.org/isc-projects/bind9/-/issues/752) but should have
been fixed.
The named.conf file is pretty simple:
# /etc/named.conf
options {
stale-answer-enable no;
directory "/var/lib/named";
managed-keys-directory "/var/lib/named/dyn/";
dump-file "/var/log/named_dump.db";
statistics-file "/var/log/named.stats";
listen-on-v6 { any; };
notify no;
disable-empty-zone
"1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
geoip-directory none;
};
include "/etc/named.conf.include";
with nothing in /etc/named.conf.include
There is a /etc/named.d/views.conf file with these (partial) contents:
view "internal" {
:
forwarders {
10.1.99.100;
10.1.99.141;
};
};
view "external" {
:
zone "smam.sm" {
notify yes;
type master;
file "/var/lib/named/master/smam.sm.zone.ext";
allow-transfer { any; };
};
};
Can anybody please explain why/how this happens?
Thanks and have a nice weekend,
Josef
--
SUSE Software Solutions Germany GmbH
Frankenstraße 146
90461 Nürnberg
Germany
Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
(HRB 36809, AG Nürnberg)
www.suse.com
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from
this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
Re: Auth server reports: resolver priming query complete
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, 2019-07-28 at 02:14 +1000, Mark Andrews wrote: > > On 28 Jul 2019, at 2:03 am, Jim Popovitch via bind-users > > wrote: > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA256 > > > > On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote: > > > Authoritative servers lookup addresses of nameservers to send notify > > > messages. > > > If the names are not in the authoritative data it will iterate to find > > > the address. > > > > Thanks Mark. BTW, this is with v9.14.4. Follow-up question: > > > > I only see ns1 (master) logging the priming, ns2 doesn't. ns2 is a > > slave to ns1, but also a master to a 3rd party (e.g. also-notify, > > notify-explict). Shouldn't ns2 also be priming addresses of the non- > > auth 3rd party? > > If you have "notify explicit;” and also-notify then named will only > send notify messages to the addresses listed in the also-notify clause > so there is not need to iterate. Priming only occurs when named actually > iterates. Should ns1 (master) be priming if it also has notify-explict and also- notify statements. The domain in question is the domain sending this email. - -Jim P. -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08esIACgkQPcxbabkK GJ85/hAAt3QPtbto6SraqIa24pmYDf0gG/D2YBzjaEI7JkqpIJHabtDSt4FjueGs gQpjgJ40ivs4sicd8KeX5OGMZcr3zerMXJrtVWg/XqlT1hi55ZwMEkEssikHiL2P HYSmNCDRUuZpUuRyQEW2kGoaeTXU/21p0SJo5Q8UCG0D/ww8dTa9ACIJGMBkGCTk KkNduOX+uG3qwSa22WEsewhyU9I7rAUd7W/PrF3nsMEshCuuom5O5zUfq2F5COyJ ad0BJJSBBHfjgEj4ym1oxqRtUoh6M9eJU12GHp9gqhI6uRsTwxtYnwdThXfwvMqp myIwnx4IdG+6gisfns1nPlsdrg6lXAKIZ3AzBKGiTSj5wMVRB3EVnDTs6C4B02pk 75i+/YOUFL5kmRJUUgIVKOqv4f3ePTM3KsglkCLRRRK+Zw/2JGui2vuekS/EO0la DQ8xcFCf75CW3v84TMtiCK0O8yMwsxFJVfW0pyQwOWhU3jjniPEVZDIMs1Wgzryk zjHq6Zi2U25ZXSHKHmYnQB97cMxSAPOikFeWuuZcKfaBhmaSOXKN7RJZdHxCxyu0 gh5k3qt0XaQj351sOm3kHLN1ZtHT2w+W+RZS+EcMu6nIUKPUDE9WNtk5P3Al/OkP FELyyEzDwc1QkaGuqzlz6kXR7BGjR50dRcqwdSJfuFUcdTneVPs= =pPMe -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Auth server reports: resolver priming query complete
> On 28 Jul 2019, at 2:03 am, Jim Popovitch via bind-users > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote: >> Authoritative servers lookup addresses of nameservers to send notify >> messages. >> If the names are not in the authoritative data it will iterate to find the >> address. > > Thanks Mark. BTW, this is with v9.14.4. Follow-up question: > > I only see ns1 (master) logging the priming, ns2 doesn't. ns2 is a > slave to ns1, but also a master to a 3rd party (e.g. also-notify, > notify-explict). Shouldn't ns2 also be priming addresses of the non- > auth 3rd party? If you have "notify explicit;” and also-notify then named will only send notify messages to the addresses listed in the also-notify clause so there is not need to iterate. Priming only occurs when named actually iterates. > > - -Jim P. > -BEGIN PGP SIGNATURE- > > iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08ddUACgkQPcxbabkK > GJ+ogxAAj4x2Cq+MtPe4mmgSN+fiOfyx5lg/TJ/TLBtBZj6TzYVd67urTF1tqzQU > gEB2fOM55XVd1ogoVSlXAT6JW3npqfb0Wi6hFGXlHJwvC7AGSwpxEKCqBvUCZIVr > 3V9zgFGbEbbmR0VvNAupAxrqUIlu0TvbhIuBSEktRObLk+9W/go+SUCxQFB0VMwe > 6UTfGkpjzTE7SWqdoSEUom57LsYm0tOu+zk+f6v7wCc3BmZPWLUpWmlyEwZFpxAy > +BZzUBSDA4lmGIqfDyY+FDqu0MIQ5T8JbN6idcvGH03nsNOhMr4gT2m9Sk80C1ro > PX0rHIS4gcMPtxnfurmRbpiaGt3psUriPCft8PyazUx47KebERvL0MQOFNH4ayuI > jHDLPVc6ZTF5kHY6AipEnzkXRO46cOKWoaasYcVjycMGXVulxqbe/Y4wMir/8Bwu > FMVgboDgDmpxSCmsgWfZv5OM/dU9QEv4nSemBBaacXbGbNXoI0ZW5375KkuMQ19d > mQM0e9HBDDJ3zj2w+ahJGeM3J/XaN87kdQQLUujdc5RUZKWvuWElYamNLahjC+l/ > 4Uez5w2ADGuCvEeid9YKypKMz1m9r2CaGEwysztNpaKNb9YEsNewNY/WQYT0XZzW > xAX/t6Q6d+LfejRZSVqk0JyL61IKax0uiQwPLLBiLc7+n4kJ1lo= > =aKXt > -END PGP SIGNATURE- > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Auth server reports: resolver priming query complete
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote: > Authoritative servers lookup addresses of nameservers to send notify messages. > If the names are not in the authoritative data it will iterate to find the > address. Thanks Mark. BTW, this is with v9.14.4. Follow-up question: I only see ns1 (master) logging the priming, ns2 doesn't. ns2 is a slave to ns1, but also a master to a 3rd party (e.g. also-notify, notify-explict). Shouldn't ns2 also be priming addresses of the non- auth 3rd party? - -Jim P. -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08ddUACgkQPcxbabkK GJ+ogxAAj4x2Cq+MtPe4mmgSN+fiOfyx5lg/TJ/TLBtBZj6TzYVd67urTF1tqzQU gEB2fOM55XVd1ogoVSlXAT6JW3npqfb0Wi6hFGXlHJwvC7AGSwpxEKCqBvUCZIVr 3V9zgFGbEbbmR0VvNAupAxrqUIlu0TvbhIuBSEktRObLk+9W/go+SUCxQFB0VMwe 6UTfGkpjzTE7SWqdoSEUom57LsYm0tOu+zk+f6v7wCc3BmZPWLUpWmlyEwZFpxAy +BZzUBSDA4lmGIqfDyY+FDqu0MIQ5T8JbN6idcvGH03nsNOhMr4gT2m9Sk80C1ro PX0rHIS4gcMPtxnfurmRbpiaGt3psUriPCft8PyazUx47KebERvL0MQOFNH4ayuI jHDLPVc6ZTF5kHY6AipEnzkXRO46cOKWoaasYcVjycMGXVulxqbe/Y4wMir/8Bwu FMVgboDgDmpxSCmsgWfZv5OM/dU9QEv4nSemBBaacXbGbNXoI0ZW5375KkuMQ19d mQM0e9HBDDJ3zj2w+ahJGeM3J/XaN87kdQQLUujdc5RUZKWvuWElYamNLahjC+l/ 4Uez5w2ADGuCvEeid9YKypKMz1m9r2CaGEwysztNpaKNb9YEsNewNY/WQYT0XZzW xAX/t6Q6d+LfejRZSVqk0JyL61IKax0uiQwPLLBiLc7+n4kJ1lo= =aKXt -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Auth server reports: resolver priming query complete
Authoritative servers lookup addresses of nameservers to send notify messages. If the names are not in the authoritative data it will iterate to find the address. Mark > On 28 Jul 2019, at 1:06 am, Jim Popovitch via bind-users > wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On Sat, 2019-07-27 at 11:04 -0400, Jim Popovitch via bind-users wrote: >> Hello! >> >> Why would an auto-only server (in this case the master) report this: >> >> Jul 27 13:07:58 ns1 named[624]: resolver priming query complete >> > > "auth-only" > > > - -Jim P. > > -BEGIN PGP SIGNATURE- > > iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08aHMACgkQPcxbabkK > GJ8tuRAAjlNlCEcG9cXb/pgaWGfbbmOB8oFGUr7KXVTJ6hNBnBV9bpDSlOKs8HaZ > AvgcMYljXTyCD3E+INHMUmRAZqgDlpK2AsEMGZRqBHBX1/TFTzHas4+CuUS8PmVb > nxDw791GOkIe1YQlZoobPCskHPlsBgkLCPYXIi2s2IG+DGmS9MSVJC9hz2Q7XHMm > gq/urkj2PN+sf6+fIC7bZ9DXGeM7AzvLNCUJADljwdTPiak8CowOLhckOY3yhkZa > UFoH9bY3U+OUosdKnm8fDn1/EbMZ70lsTeFZVMieX73W7nkQtudhovHmVQ6UdfrO > Sv5D2hH5C+0Le60n5vyVe6cPWtgVb7CVSGnx6pK6XmHyspJpEiA9EQZ4MOW7QeLe > DY3u2i3zHhFKNOlJ1fkD8Hki2GJtN8LhdG+huS+2eWso/d89FOsjmYbJyevp5IV7 > oOJZ4jNAEkRr/jz+MyRdYjT99Yd9gy/sM8lsjHbCI+6vcKlJQgrEWdzfUs1qnGh0 > GCe0iF9gTq9LHOk1+ACDMDWzPS1Gt9Bsa81+rk+jB4Y0tCaR1E2ODz/2HAg6Jqq7 > gMOMgw5jkifvIgUN5phiEdfSlmRLcXJp1jJpZ3UCjbRHwkeINKUdegDt0B9njRiG > w77j027FeXMZW8fMvYMOEFNacyRjRYQVFbnUfy5Zah6l4TLTamU= > =Dyhy > -END PGP SIGNATURE- > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Auth server reports: resolver priming query complete
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Sat, 2019-07-27 at 11:04 -0400, Jim Popovitch via bind-users wrote: > Hello! > > Why would an auto-only server (in this case the master) report this: > > Jul 27 13:07:58 ns1 named[624]: resolver priming query complete > "auth-only" - -Jim P. -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08aHMACgkQPcxbabkK GJ8tuRAAjlNlCEcG9cXb/pgaWGfbbmOB8oFGUr7KXVTJ6hNBnBV9bpDSlOKs8HaZ AvgcMYljXTyCD3E+INHMUmRAZqgDlpK2AsEMGZRqBHBX1/TFTzHas4+CuUS8PmVb nxDw791GOkIe1YQlZoobPCskHPlsBgkLCPYXIi2s2IG+DGmS9MSVJC9hz2Q7XHMm gq/urkj2PN+sf6+fIC7bZ9DXGeM7AzvLNCUJADljwdTPiak8CowOLhckOY3yhkZa UFoH9bY3U+OUosdKnm8fDn1/EbMZ70lsTeFZVMieX73W7nkQtudhovHmVQ6UdfrO Sv5D2hH5C+0Le60n5vyVe6cPWtgVb7CVSGnx6pK6XmHyspJpEiA9EQZ4MOW7QeLe DY3u2i3zHhFKNOlJ1fkD8Hki2GJtN8LhdG+huS+2eWso/d89FOsjmYbJyevp5IV7 oOJZ4jNAEkRr/jz+MyRdYjT99Yd9gy/sM8lsjHbCI+6vcKlJQgrEWdzfUs1qnGh0 GCe0iF9gTq9LHOk1+ACDMDWzPS1Gt9Bsa81+rk+jB4Y0tCaR1E2ODz/2HAg6Jqq7 gMOMgw5jkifvIgUN5phiEdfSlmRLcXJp1jJpZ3UCjbRHwkeINKUdegDt0B9njRiG w77j027FeXMZW8fMvYMOEFNacyRjRYQVFbnUfy5Zah6l4TLTamU= =Dyhy -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Auth server reports: resolver priming query complete
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello! Why would an auto-only server (in this case the master) report this: Jul 27 13:07:58 ns1 named[624]: resolver priming query complete tia, - -Jim P. -BEGIN PGP SIGNATURE- iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08aBwACgkQPcxbabkK GJ+d+A//dmDuJq06I4BAriAYowLpGTzbtPDQLp+girpskBOFyoXJCTqm0LR0sfcW /f19cuIdSQ4P/VVusyjP02lw66prO33/593Rzi4vdHBGD35/MMj5GPlVMB0nobbW BR3PtBVL2pVVGVPV8bmZzoZOugUV9EsITkPhg41Jy1Aw4LUc53pYrC8D66i+QAl4 J/qazX84SJh64WXpPBgfuksU1l6W5GMBtYS+DzfDNATLjKYknaDTojeObEUJiWhd +9dhStwRpGHdc5wWRmWJFaATvpwuYnQqZDV2aTmb2fEdbI3cwf3DN6PdygTNhU/+ bLljLuconR69GxXkKvpMLkMdmmijR0sAmQWOBvC7UnwpN/y8tZtPtZ2Mk42xE3h/ yA/Bq5lzfIT18PNAMkX6lEpZPhUsRygQ/jwa7MixMiO4OWGkuIKBZeNnapXT14G5 NbQUrXuiEzu9/Nxw4WO8nF/uIdBU0LnJoui1EQjudKZxdU9gU3rwq+EjcLiY3wPc Mbm/6Po4ib9a0jv5ep8ZjfDv63ax0TKLA2JC4bZAAWPvKSoTK7oQMYEFUVV9lk6t zFxovJo3yH/9/OyOUQeNVYQx9WPKMqurISap+5tBhoyT7ZRnoYQmKnmC7uWLa6y2 rR4BK93CDLAPr1KyAIE2f+fZiRYF5juYNe1sSDySp71iFn4g+gw= =epDS -END PGP SIGNATURE- ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
