论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2007-02-27 10:41 |只看该作者 |倒序浏览

我的apache会产生很多dns查询，用
lsof -i:53
httpd 8514 apache 30u  IPv4 7281619    UDP s.**.com:57559->s.**.com:domain
httpd 8562 apache 30u  IPv4 7281042    UDP s.**.com:57545->s.**.com:domain
httpd 9097 apache 30u  IPv4 7281994    UDP s.**.com:57587->s.**.com:domain
httpd 9099 apache 30u  IPv4 7281315    UDP s.**.com:57549->s.**.com:domain

web服务器的dns是指向自己的dns服务器，在bind的日志里找到

27-Feb-2007 10:26:59.448 queries: client 127.0.0.1#56652: view all: query: 68.14.92.222.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.460 queries: client 127.0.0.1#56652: view all: query: 252.167.76.218.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.489 queries: client 127.0.0.1#56652: view all: query: lj611887.inktomisearch.com IN AAAA +
27-Feb-2007 10:26:59.490 queries: client 127.0.0.1#56653: view all: query: 252.167.76.218.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.506 queries: client 127.0.0.1#56630: view all: query: 210.213.146.219.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.542 queries: client 127.0.0.1#56653: view all: query: 98.107.105.202.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.549 queries: client 127.0.0.1#56653: view all: query: 252.167.76.218.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.580 queries: client 127.0.0.1#56653: view all: query: 74.130.191.60.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.607 queries: client 127.0.0.1#56653: view all: query: 74.130.191.60.in-addr.arpa IN PTR +
27-Feb-2007 10:26:59.650 queries: client 127.0.0.1#56653: view all: query: 226.63.248.124.in-addr.arpa IN PTR +

请教一下这些dns查询是如何产生的啊？

文库|博客

kenduest

荣誉版主

论坛徽章:: 0

2楼 [报告]

发表于 2007-02-27 13:29 |只看该作者

原帖由 cncrazyzz 于 2007-2-27 10:41 发表
我的apache会产生很多dns查询，用
lsof -i:53
httpd 8514 apache 30u IPv4 7281619 UDP s.**.com:57559->s.**.com:domain
httpd 8562 apache 30u IPv4 7281042 UDP s.**.com:57545-& ...

1. 有开 HostnameLookups 的话就会产生。因为 log 要纪录反查后的资讯。

http://httpd.apache.org/docs/2.2/mod/core.html#hostnamelookups

2. 若是您有开 proxy 代理功能，外来请求会请 apache 代理网站，这个也会产生该查询动作。

--