论坛徽章:: 5

电梯直达

1楼 [收藏(0)] [报告]

发表于 2012-07-17 19:58 |只看该作者 |倒序浏览

本帖最后由 ywmkelly 于 2012-07-17 20:12 编辑

[root|19:55:55~]tail -n 30 /var/log/messages| grep named
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: validating @0x7f96ec450670: com SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'qq.com/DS/IN': 202.101.172.35#53
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'cn.lxdns.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: validating @0x7f96e406c760: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'cn.lxdns.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: error (network unreachable) resolving 'cn.lxdns.com.dlv.isc.org/DS/IN': 2001:500:60::29#53
Jul 17 19:54:55 rhel6-1-227-cn named[21980]: error (network unreachable) resolving 'cn.lxdns.com.dlv.isc.org/DS/IN': 2001:4f8:0:2::20#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96e406c760: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96ec450670: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (network unreachable) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 2001:500:2c::254#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (network unreachable) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DS/IN': 2001:500:71::29#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'qq.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96ec451300: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'qq.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (insecurity proof failed) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DLV/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96ec450670: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (insecurity proof failed) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DLV/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (network unreachable) resolving 'tplanet.sinajs.cn.lxdns.com.dlv.isc.org/DLV/IN': 2001:500:71::29#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'qzone.qq.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96ec3e3da0: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'qzone.qq.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'sns.qzone.qq.com.dlv.isc.org/DS/IN': 202.101.172.35#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: validating @0x7f96e406b750: dlv.isc.org SOA: got insecure response; parent indicates it should be secure
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (no valid RRSIG) resolving 'sns.qzone.qq.com.dlv.isc.org/DS/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (insecurity proof failed) resolving 'sns.qzone.qq.com.dlv.isc.org/DLV/IN': 192.168.100.251#53
Jul 17 19:54:56 rhel6-1-227-cn named[21980]: error (insecurity proof failed) resolving 'sns.qzone.qq.com.dlv.isc.org/DLV/IN': 202.101.172.35#53

好吧，我从192.168.100.251上面看到有非法的区域复制请求，只是时间有点出入，不知道是不是这个原因产生的。

文库|博客

llzqq

广告杀手

论坛徽章:: 0

2楼 [报告]

发表于 2012-07-18 15:29 |只看该作者

named.conf列一下，怎么这么多错误啊。那个版本的BIND？

实战分享：从技术角度谈机器学习入门| 【大话IT】RadonDB低门槛向MySQL集群下战书 | ChinaUnix打赏功能已上线！ | 新一代分布式关系型数据库RadonDB知多少？

返回列表

Chinaunix › 论坛 › IT运维 › 服务器应用 › DNS服务器，日志报DNS错误，咋回事？

[DNS] DNS服务器，日志报DNS错误，咋回事？ [复制链接]