Query Logging

[phatPhrog]

Is there a simple way to turn on query logging? Over the last few days I have started getting:

Code: Select all

Apr  1 10:16:37 server1 named[19504]: lame server resolving '249.83.81.206.ipwhois.rfc-ignorant.org' (in 'ipwhois.rfc-ignorant.org'?): 127.0.0.1#53

Thousand of them as a matter-a-fact. Today I had a new addition to the logs:

Code: Select all

Apr  1 09:26:02 server1 named[19504]: lame server resolving 'online-pharmacies.e-pills-4u.com/.sbl-xbl.spamhaus.org' (in 'sbl-xbl.spamhaus.org'?): 212.227.126.252#53

This started after installing mod_security, but I can find nothing on my server that is calling for information from rfc-ignorant.org and can't understand why spamhaus.org would be showing up as a lameserver.

Although unsure whether I did it properly, I added the latest root servers to my named.root.

I asked for help at SW-Soft, but either no one knows or no answer is forthcoming.

Any ideas?

[phatPhrog]

Not sure why I can't get anyone to answer this question. No one at Plesk will, no one here will.

Oh well. After exhaustive work I found the culprit.

It is qmail-scanner! Once removed the lame server and all calls to rfc-ignorant stopped.

Thanks for all the help.