BIND Log messages for Lame and Refused

[flyboy320]

Hello all,

I have noticed a repeating line in my syslog file:

Dec 4 08:24:18 linux1 named[5044]: lame server resolving 'industries.to' (in 'industries.to'?): 193.0.12.224#53
Dec 4 08:24:19 linux1 named[5044]: lame server resolving 'industries.to' (in 'industries.to'?): 194.0.0.53#53
Dec 4 08:24:24 linux1 named[5044]: unexpected RCODE (REFUSED) resolving 'industries.to/NS/IN': 195.186.1.109#53
Dec 4 08:24:25 linux1 named[5044]: unexpected RCODE (REFUSED) resolving 'industries.to/NS/IN': 195.186.4.109#53
Dec 4 09:02:49 linux1 named[5044]: unexpected RCODE (REFUSED) resolving 'industries.to/NS/IN': 195.186.1.109#53
Dec 4 09:02:49 linux1 named[5044]: unexpected RCODE (REFUSED) resolving 'industries.to/NS/IN': 195.186.4.109#53
Dec 4 09:02:49 linux1 named[5044]: lame server resolving 'industries.to' (in 'industries.to'?): 194.0.0.53#53
Dec 4 09:02:49 linux1 named[5044]: lame server resolving 'industries.to' (in 'industries.to'?): 193.0.12.224#53

Can someone pass along ideas as to why these messages are in my log file? My BIND server is internal to my network only and does not allow incoming 53 requests. I have another server for that. It seems confusing why the messages are for different IP addresses to the same domain name. I have check the other log files and these IP addresses or domain names do not show up there as well.

Thanks in advance.

Alan

[falko]

Is industries.to your own domain?

[flyboy320]

Falko,

Thanks for the reply. The domain is not one of mine and I found a post that fixed the problem but I am still unlcear why. The change the nameserver setting in the resolv.conf file to an external DNS server. It was originally set to my internal server and the errors were generated when the internal DNS server could not resolve the domain names. The error are no longer in the log file but I have another question:

Why was my internal DNS server trying to resolve those entries? ( I do not route 53 to that server and the log shows different IP address for that entry). I don't see that those IP address or domain names in any other files (i.e. postfix).

Thanks again for the response and really appreciate the site. I followed the perfect 6.06 setup and it has been working great.

-Alan

[falko]

You should always use external nameservers in /etc/resolv.conf, because if your nemaserver id queried for a domain that it isn't authoritative for, it asks the nameservers in /etc/resolv.conf. If you use an internal nameserver in /etc/resolv.conf, and it can't answer the query either, then you get a lookup error.