Hello,
I was about to attempt to setup a dns slave but found the below in /var/log/messages.
I am wondering how to determine if it is a problem on my side (possibly firewall or DNS issue?) that would cause all these to not resolve? Or if it is simply normal? ( i saw a post stating some could be from postfix trying to resolve mssgs soming in, etc.)
Just looking to see if I have an issue awaiting to kick me in the face later... :)
Thank you!
Jan 8 19:50:03 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 19:50:05 mail01 named[16307]: error (network unreachable) resolving 'apache.org/NS/IN': 2001:500:48::1#53 Jan 8 19:50:05 mail01 named[16307]: error (network unreachable) resolving 'apache.org/NS/IN': 2001:500:b::1#53 Jan 8 19:50:08 mail01 named[16307]: error (network unreachable) resolving 'apache.org/NS/IN': 2001:500:f::1#53 Jan 8 19:50:08 mail01 named[16307]: error (network unreachable) resolving 'apache.org/NS/IN': 2001:500:e::1#53 Jan 8 19:50:08 mail01 named[16307]: error (network unreachable) resolving 'apache.org/NS/IN': 2001:500:40::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:48::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:c::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:f::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:e::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:b::1#53 Jan 8 19:50:15 mail01 named[16307]: error (network unreachable) resolving 'apache.org/DS/IN': 2001:500:40::1#53 Jan 8 19:50:18 mail01 named[16307]: success resolving 'apache.org/DS' (in 'org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 19:50:21 mail01 named[16307]: success resolving 'apache.org.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 19:50:21 mail01 named[16307]: success resolving 'apache.org/NS' (in 'apache.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 19:50:30 mail01 named[16307]: success resolving 'google.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:00:03 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 20:05:05 mail01 named[16307]: success resolving 'sourceforge.net/DS' (in 'net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:38 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=58.218.199.147 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=27977 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 8 20:07:38 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=58.218.199.147 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=9415 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 8 20:07:38 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=58.218.199.147 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=9000 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 8 20:07:38 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=58.218.199.147 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=2479 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 8 20:07:38 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=58.218.199.147 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=6588 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 8 20:07:40 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa/DS/IN': 2001:dc0:1:0:4777::131#53 Jan 8 20:07:40 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa/DS/IN': 2001:dc0:4001:1:0:1836:0:140#53 Jan 8 20:07:40 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa/DS/IN': 2001:500:13::c7d4:35#53 Jan 8 20:07:41 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa/DS/IN': 2001:67c:1010:27::53#53 Jan 8 20:07:41 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa/DS/IN': 2001:13c7:7002:3000::11#53 Jan 8 20:07:43 mail01 named[16307]: success resolving '218.58.in-addr.arpa/DS' (in '58.in-addr.arpa'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/AAAA/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/AAAA/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/AAAA/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/A/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/A/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/A/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/A/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/A/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/AAAA/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/A/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/A/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/AAAA/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/AAAA/IN': 2001:500:2c::254#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/AAAA/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ams.sns-pb.isc.org/AAAA/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.sfba.sns-pb.isc.org/AAAA/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/A/IN': 2001:500:71::30#53 Jan 8 20:07:45 mail01 named[16307]: error (network unreachable) resolving 'dlv.ord.sns-pb.isc.org/A/IN': 2001:500:60::30#53 Jan 8 20:07:45 mail01 named[16307]: success resolving 'dlv.ord.sns-pb.isc.org/AAAA' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:46 mail01 named[16307]: error (network unreachable) resolving '218.58.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:500:2c::254#53 Jan 8 20:07:48 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:500:2f::f#53 Jan 8 20:07:48 mail01 named[16307]: error (network unreachable) resolving './NS/IN': 2001:dc3::35#53 Jan 8 20:07:48 mail01 named[16307]: success resolving 'dlv.ams.sns-pb.isc.org/AAAA' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:48 mail01 named[16307]: success resolving 'dlv.sfba.sns-pb.isc.org/A' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:48 mail01 named[16307]: success resolving 'dlv.ord.sns-pb.isc.org/A' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:48 mail01 named[16307]: success resolving 'dlv.ams.sns-pb.isc.org/A' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:48 mail01 named[16307]: success resolving 'dlv.sfba.sns-pb.isc.org/AAAA' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:49 mail01 named[16307]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:502:ad09::23#53 Jan 8 20:07:49 mail01 named[16307]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:502:2eda::23#53 Jan 8 20:07:51 mail01 named[16307]: success resolving './NS' (in '.'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:51 mail01 named[16307]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:71::29#53 Jan 8 20:07:51 mail01 named[16307]: error (network unreachable) resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:2c::254#53 Jan 8 20:07:53 mail01 named[16307]: success resolving 'dlv.isc.org/DNSKEY' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:53 mail01 named[16307]: success resolving '218.58.in-addr.arpa.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:07:56 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:500:48::1#53 Jan 8 20:07:59 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:4f8:0:2::19#53 Jan 8 20:07:59 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:500:60::30#53 Jan 8 20:08:03 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:500:71::30#53 Jan 8 20:08:04 mail01 named[16307]: error (network unreachable) resolving 'sfba.sns-pb.isc.org/AAAA/IN': 2001:500:2c::254#53 Jan 8 20:08:05 mail01 named[16307]: success resolving 'sfba.sns-pb.isc.org/AAAA' (in 'isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:08:21 mail01 named[16307]: error (network unreachable) resolving 'google.com/DS/IN': 2001:503:231d::2:30#53 Jan 8 20:08:22 mail01 named[16307]: error (network unreachable) resolving 'google.com/DS/IN': 2001:503:a83e::2:30#53 Jan 8 20:08:23 mail01 named[16307]: success resolving 'google.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:09:44 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=188.212.152.7 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=17 ID=26437 PROTO=TCP SPT=3389 DPT=3389 WINDOW=50723 RES=0x00 SYN URGP=0 Jan 8 20:09:48 mail01 named[16307]: error (network unreachable) resolving 'ns1.jump.ro/AAAA/IN': 2001:628:453:4001::53#53 Jan 8 20:09:48 mail01 named[16307]: error (network unreachable) resolving 'pri.authdns.ripe.net/AAAA/IN': 2001:dc3::35#53 Jan 8 20:09:48 mail01 named[16307]: error (network unreachable) resolving 'ns1.jump.ro/AAAA/IN': 2001:4f8:0:2::13#53 Jan 8 20:09:49 mail01 named[16307]: error (network unreachable) resolving 'ns.ripe.net/A/IN': 2001:dc0:2001:a:4608::59#53 Jan 8 20:09:49 mail01 named[16307]: error (network unreachable) resolving 'ns.ripe.net/AAAA/IN': 2001:500:2e::1#53 Jan 8 20:09:50 mail01 named[16307]: error (network unreachable) resolving 'ns.ripe.net/AAAA/IN': 2001:dc0:1:0:4777::140#53 Jan 8 20:09:52 mail01 named[16307]: error (network unreachable) resolving 'ns1.zaininter.net/AAAA/IN': 2001:500:2f::f#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns2.zaininter.net/AAAA/IN': 2001:500:2f::f#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns2.zaininter.net/AAAA/IN': 2001:dc3::35#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns1.zaininter.net/AAAA/IN': 2001:dc3::35#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns1.zaininter.net/AAAA/IN': 2001:503:c27::2:30#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns2.zaininter.net/AAAA/IN': 2001:500:1::803f:235#53 Jan 8 20:09:53 mail01 named[16307]: error (network unreachable) resolving 'ns2.zaininter.net/AAAA/IN': 2001:503:c27::2:30#53 Jan 8 20:09:54 mail01 named[16307]: error (network unreachable) resolving 'ns1.zaininter.net/AAAA/IN': 2001:500:1::803f:235#53 Jan 8 20:09:54 mail01 named[16307]: error (network unreachable) resolving 'pri.authdns.ripe.net/AAAA/IN': 2001:660:3006:1::1:1#53 Jan 8 20:09:54 mail01 named[16307]: error (network unreachable) resolving 'pri.authdns.ripe.net/A/IN': 2001:660:3006:1::1:1#53 Jan 8 20:09:54 mail01 named[16307]: success resolving 'pri.authdns.ripe.net/AAAA' (in 'ripe.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:09:54 mail01 named[16307]: success resolving 'pri.authdns.ripe.net/A' (in 'ripe.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:10:03 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 20:12:16 mail01 named[16307]: managed-keys-zone ./IN: Failed to create fetch for DNSKEY update Jan 8 20:12:16 mail01 named[16307]: managed-keys-zone ./IN: Failed to create fetch for DNSKEY update Jan 8 20:15:05 mail01 named[16307]: error (network unreachable) resolving 'sun.com/NS/IN': 2001:503:231d::2:30#53 Jan 8 20:15:09 mail01 named[16307]: error (network unreachable) resolving 'sun.com/DS/IN': 2001:503:a83e::2:30#53 Jan 8 20:15:10 mail01 named[16307]: success resolving 'sun.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:15:10 mail01 named[16307]: success resolving 'sun.com/NS' (in 'sun.com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:19:23 mail01 named[16307]: success resolving 'gmail.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:19:23 mail01 named[16307]: error (network unreachable) resolving 'gmail.com.dlv.isc.org/DLV/IN': 2001:4f8:0:2::19#53 Jan 8 20:19:28 mail01 named[16307]: error (network unreachable) resolving 'gmail.com.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:19:28 mail01 named[16307]: error (network unreachable) resolving 'gmail.com.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:19:31 mail01 named[16307]: error (network unreachable) resolving 'gmail.com.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:19:35 mail01 named[16307]: success resolving 'gmail.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:20:13 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:40::1#53 Jan 8 20:20:16 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:48::1#53 Jan 8 20:20:18 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:b::1#53 Jan 8 20:20:18 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:c::1#53 Jan 8 20:20:21 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:e::1#53 Jan 8 20:20:24 mail01 named[16307]: error (network unreachable) resolving 'org/DNSKEY/IN': 2001:500:f::1#53 Jan 8 20:20:26 mail01 named[16307]: validating @0x7f9c587ddd10: org DNSKEY: got insecure response; parent indicates it should be secure Jan 8 20:20:26 mail01 named[16307]: error (insecurity proof failed) resolving 'org/DNSKEY/IN': 199.19.54.1#53 Jan 8 20:20:29 mail01 named[16307]: success resolving 'org/DNSKEY' (in 'org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:20:29 mail01 named[16307]: success resolving 'rfc-ignorant.org/DS' (in 'org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:20:30 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:22:17 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 20:25:07 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:500:60::29#53 Jan 8 20:25:10 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:500:2c::254#53 Jan 8 20:25:10 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53 Jan 8 20:25:13 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:25:17 mail01 named[16307]: error (network unreachable) resolving 'ns1.isc.ultradns.net/AAAA/IN': 2001:502:4612::1#53 Jan 8 20:25:17 mail01 named[16307]: error (network unreachable) resolving 'ns2.isc.ultradns.net/AAAA/IN': 2001:502:4612::1#53 Jan 8 20:25:17 mail01 named[16307]: validating @0x7f9c58532320: dlv.isc.org SOA: got insecure response; parent indicates it should be secure Jan 8 20:25:18 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:502:ad09::23#53 Jan 8 20:25:20 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:500:60::29#53 Jan 8 20:25:23 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:500:2c::254#53 Jan 8 20:25:23 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:502:2eda::23#53 Jan 8 20:25:26 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:4f8:0:2::20#53 Jan 8 20:25:28 mail01 named[16307]: error (network unreachable) resolving 'rfc-ignorant.org.dlv.isc.org/DS/IN': 2001:500:71::29#53 Jan 8 20:26:53 mail01 named[16307]: success resolving 'mailjet.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:26:55 mail01 named[16307]: error (network unreachable) resolving 'in.mailjet.com.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:26:55 mail01 kernel: Firewall: TCP_OUT Blocked IN= OUT=eth0 SRC=98.142.218.10 DST=46.105.158.224 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58603 DF PROTO=TCP SPT=42869 DPT=587 WINDOW=5840 RES=0x00 SYN URGP=0 Jan 8 20:26:58 mail01 kernel: Firewall: TCP_OUT Blocked IN= OUT=eth0 SRC=98.142.218.10 DST=46.105.158.224 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58604 DF PROTO=TCP SPT=42869 DPT=587 WINDOW=5840 RES=0x00 SYN URGP=0 Jan 8 20:27:01 mail01 named[16307]: success resolving 'in.mailjet.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:27:04 mail01 kernel: Firewall: TCP_OUT Blocked IN= OUT=eth0 SRC=98.142.218.10 DST=46.105.158.224 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58605 DF PROTO=TCP SPT=42869 DPT=587 WINDOW=5840 RES=0x00 SYN URGP=0 Jan 8 20:27:14 mail01 named[16307]: success resolving 'google.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:30:03 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:30:05 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:30:05 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53 Jan 8 20:30:05 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:500:60::29#53 Jan 8 20:30:11 mail01 named[16307]: error (network unreachable) resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:30:14 mail01 named[16307]: success resolving 'fulldom.rfc-ignorant.org.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:01 mail01 kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:15:c5:f5:63:c4:00:0b:46:a0:10:00:08:00 SRC=122.192.36.150 DST=98.142.218.10 LEN=40 TOS=0x00 PREC=0x00 TTL=105 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0 Jan 8 20:32:02 mail01 named[16307]: error (network unreachable) resolving '150.36.192.122.in-addr.arpa/PTR/IN': 2001:500:13::73#53 Jan 8 20:32:02 mail01 named[16307]: error (network unreachable) resolving '150.36.192.122.in-addr.arpa/PTR/IN': 2001:dc0:2001:0:4608::25#53 Jan 8 20:32:05 mail01 named[16307]: error (network unreachable) resolving 'ns1.jscnc.net/AAAA/IN': 2001:503:231d::2:30#53 Jan 8 20:32:05 mail01 named[16307]: success resolving 'ns2.jscnc.net/A' (in 'jscnc.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:05 mail01 named[16307]: success resolving 'ns2.jscnc.net/AAAA' (in 'jscnc.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:06 mail01 named[16307]: success resolving 'ns1.jscnc.net/A' (in 'jscnc.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:06 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa/DS/IN': 2001:500:13::c7d4:35#53 Jan 8 20:32:06 mail01 named[16307]: error (network unreachable) resolving 'ns1.jscnc.net/AAAA/IN': 2001:503:a83e::2:30#53 Jan 8 20:32:07 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa/DS/IN': 2001:dc0:2001:0:4608::25#53 Jan 8 20:32:08 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa/DS/IN': 2001:13c7:7002:3000::11#53 Jan 8 20:32:08 mail01 named[16307]: success resolving 'ns1.jscnc.net/AAAA' (in 'jscnc.net'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:09 mail01 named[16307]: error (network unreachable) resolving '122.in-addr.arpa/DNSKEY/IN': 2001:dc0:4001:1:0:1836:0:140#53 Jan 8 20:32:11 mail01 named[16307]: error (network unreachable) resolving '122.in-addr.arpa/DNSKEY/IN': 2001:dc0:1:0:4777::131#53 Jan 8 20:32:12 mail01 named[16307]: success resolving '122.in-addr.arpa/DNSKEY' (in '122.in-addr.arpa'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:12 mail01 named[16307]: success resolving '192.122.in-addr.arpa/DS' (in '122.in-addr.arpa'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:12 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:32:16 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:32:16 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:500:60::29#53 Jan 8 20:32:16 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:500:2c::254#53 Jan 8 20:32:19 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53 Jan 8 20:32:19 mail01 named[16307]: error (network unreachable) resolving '192.122.in-addr.arpa.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:32:22 mail01 named[16307]: success resolving '192.122.in-addr.arpa.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:33 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:32:38 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:32:38 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:32:42 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:60::29#53 Jan 8 20:32:44 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:502:ad09::23#53 Jan 8 20:32:45 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53 Jan 8 20:32:45 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:32:48 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:60::29#53 Jan 8 20:32:49 mail01 named[16307]: error (network unreachable) resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:2c::254#53 Jan 8 20:32:49 mail01 named[16307]: error (network unreachable) resolving 'alt3.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:502:2eda::23#53 Jan 8 20:32:50 mail01 named[16307]: success resolving 'alt2.gmail-smtp-in.l.google.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:51 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:71::29#53 Jan 8 20:32:51 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53 Jan 8 20:32:52 mail01 named[16307]: validating @0x7f9c587ddd10: dlv.isc.org SOA: got insecure response; parent indicates it should be secure Jan 8 20:32:55 mail01 named[16307]: error (network unreachable) resolving 'alt1.gmail-smtp-in.l.google.com.dlv.isc.org/DLV/IN': 2001:500:2c::254#53 Jan 8 20:32:56 mail01 named[16307]: success resolving 'alt3.gmail-smtp-in.l.google.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:32:57 mail01 named[16307]: validating @0x7f9c5813ea40: dlv.isc.org SOA: got insecure response; parent indicates it should be secure Jan 8 20:32:58 mail01 named[16307]: error (network unreachable) resolving 'google.com.dlv.isc.org/DS/IN': 2001:502:ad09::23#53 Jan 8 20:33:01 mail01 named[16307]: error (timed out) resolving 'alt3.gmail-smtp-in.l.google.com/A/IN': 216.239.36.10#53 Jan 8 20:33:01 mail01 named[16307]: error (timed out) resolving 'alt4.gmail-smtp-in.l.google.com/A/IN': 216.239.32.10#53 Jan 8 20:33:01 mail01 named[16307]: error (timed out) resolving 'alt2.gmail-smtp-in.l.google.com/A/IN': 216.239.32.10#53 Jan 8 20:33:02 mail01 named[16307]: success resolving 'google.com.dlv.isc.org/DS' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:33:07 mail01 named[16307]: success resolving 'gmail-smtp-in.l.google.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:33:14 mail01 named[16307]: success resolving 'l.google.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:35:02 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 20:38:40 mail01 named[16307]: client 209.85.144.92#64818: query (cache) 'kelsiek.com/MX/IN' denied Jan 8 20:45:02 mail01 clamd[22304]: SelfCheck: Database status OK. Jan 8 20:45:09 mail01 named[16307]: success resolving 'motorola.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:11 mail01 named[16307]: error (network unreachable) resolving 'akamai.com/DS/IN': 2001:503:231d::2:30#53 Jan 8 20:45:12 mail01 named[16307]: success resolving 'akamai.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:16 mail01 named[16307]: success resolving 'motorola.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:16 mail01 named[16307]: success resolving 'motorola.com/NS' (in 'motorola.com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:20 mail01 named[16307]: success resolving 'akamai.com.dlv.isc.org/DLV' (in 'dlv.isc.org'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:20 mail01 named[16307]: success resolving 'akamai.com/NS' (in 'akamai.com'?) after reducing the advertised EDNS UDP packet size to 512 octets Jan 8 20:45:30 mail01 named[16307]: success resolving 'google.com/DS' (in 'com'?) after reducing the advertised EDNS UDP packet size to 512 octets
Comments
Submitted by andreychek on Sun, 01/08/2012 - 19:57 Comment #1
Well, it's not abnormal to see resolution failures in the logs -- but we can certainly test to see if there's a DNS problem.
If you log into your server over SSH, what output do you get if you run this command:
host google.com
Also, what is the output of this command:
cat /etc/resolv.conf
Submitted by kappler0 on Sun, 01/08/2012 - 20:00 Pro Licensee Comment #2
[root@targetmyad /]# host google.com
google.com has address 74.125.65.105
google.com has address 74.125.65.106
google.com has address 74.125.65.147
google.com has address 74.125.65.99
google.com has address 74.125.65.103
google.com has address 74.125.65.104
google.com mail is handled by 40 alt3.aspmx.l.google.com.
google.com mail is handled by 50 alt4.aspmx.l.google.com.
google.com mail is handled by 10 aspmx.l.google.com.
google.com mail is handled by 20 alt1.aspmx.l.google.com.
google.com mail is handled by 30 alt2.aspmx.l.google.com.
[root@targetmyad /]#
[root@targetmyad /]# cat /etc/resolv.conf
nameserver 127.0.0.1
nameserver 4.2.2.2
nameserver 4.2.2.1
[root@targetmyad /]#
I would suspect this is good.. :)
Submitted by andreychek on Sun, 01/08/2012 - 22:07 Comment #3
Yeah if you can perform DNS lookups on the command line like that, you should be in good shape. There may have been a temporary network problem, a temporary problem with one of the DNS servers you're using, or related problem. But if it's working now -- you should be okay!
Submitted by kappler0 on Sun, 01/08/2012 - 22:21 Pro Licensee Comment #4
Thank you!
I got the same type of issue on the same log
Feb 15 11:04:17 host named[2508]: error (network unreachable) resolving 'host.domain.com.eu-west-1.compute.internal/A/IN': 2001:500:3::42#53 Feb 15 11:04:17 host named[2508]: error (network unreachable) resolving 'host.domain.com.eu-west-1.compute.internal/A/IN': 2001:dc3::35#53 Feb 15 11:04:17 host named[2508]: error (network unreachable) resolving './NS/IN': 2001:500:3::42#53 Feb 15 11:04:17 host named[2508]: error (network unreachable) resolving './NS/IN': 2001:dc3::35#53
The dns lookups seem to make sense :
[centos@host ~]$ host google.com google.com has address 216.58.211.174 google.com has IPv6 address 2a00:1450:4009:813::200e google.com mail is handled by 40 alt3.aspmx.l.google.com. google.com mail is handled by 50 alt4.aspmx.l.google.com. google.com mail is handled by 10 aspmx.l.google.com. google.com mail is handled by 20 alt1.aspmx.l.google.com. google.com mail is handled by 30 alt2.aspmx.l.google.com. [centos@host ~]$ cat /etc/resolv.conf ; generated by /usr/sbin/dhclient-script search eu-west-1.compute.internal domain.com nameserver 127.0.0.1 nameserver 172.31.0.2
Unfortunately the errors keep pouring in
Submitted by andreychek on Thu, 02/15/2018 - 15:00 Comment #6
Howdy -- other than what you see in the logs there, are you experiencing any other issues? Any network sorts of issues, problems with email not arriving, or the like?