From owner-freebsd-chat Wed Nov 14 2: 7: 0 2001 Delivered-To: freebsd-chat@freebsd.org Received: from riker.skynet.be (riker.skynet.be [195.238.3.132]) by hub.freebsd.org (Postfix) with ESMTP id BBF2D37B416; Wed, 14 Nov 2001 02:06:55 -0800 (PST) Received: from [194.78.144.27] ([194.78.144.27]) by riker.skynet.be (8.11.6/8.11.6/Skynet-OUT-2.16) with ESMTP id fAEA6Z400275; Wed, 14 Nov 2001 11:06:36 +0100 (MET) (envelope-from ) Mime-Version: 1.0 X-Sender: bs663385@pop.skynet.be Message-Id: In-Reply-To: <4A256B04.0034A9DA.00@mail.mitchells.com.au> References: <4A256B04.0034A9DA.00@mail.mitchells.com.au> Date: Wed, 14 Nov 2001 11:05:00 +0100 To: "Julian Morgan" , questions@FreeBSD.ORG, chat@FreeBSD.ORG From: Brad Knowles Subject: Re: Named and NatD running mad in TOP Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org At 7:35 PM +1000 11/14/01, Julian Morgan wrote: > Although I did mailq and there was nothing in there I would say ppl in the > office would have trouble getting resources from the server.. After a reboot, > both Named and Nat were going sky high... Turn on query logging, so that you can see where your DNS queries are coming from. Many people have found that they're running open caching/recursive servers and are getting the hell abused out of their machines by an amazing variety of people on the 'net. If you don't turn on query logging, at least configure your machine so that it does not answer queries from non-local IP addresses (whatever you have on your local network behind the NAT). If you're still getting high usage rates after turning off public caching/recursive service, then check to see if you've got a program that is going through and parsing web log data (webalizer or whatever), because that process will seriously chew up DNS server resources while its running. -- Brad Knowles, H4sICIFgXzsCA2RtYS1zaWcAPVHLbsMwDDvXX0H0kkvbfxiwVw8FCmzAzqqj1F4dy7CdBfn7 Kc6wmyGRFEnvvxiWQoCvqI7RSWTcfGXQNqCUAnfIU+AT8OZ/GCNjRVlH0bKpguJkxiITZqes MxwpSucyDJzXxQEUe/ihgXqJXUXwD9ajB6NHonLmNrUSK9nacHQnH097szO74xFXqtlbT3il wMsBz5cnfCR5cEmci0Rj9u/jqBbPeES1I4PeFBXPUIT1XDSOuutFXylzrQvGyboWstCoQZyP dxX4dLx0eauFe1x9puhoi0Ao1omEJo+BZ6XLVNaVpWiKekxN0VK2VMpmAy+Bk7ZV4SO+p1L/ uErNRS/qH2iFU+iNOtbcmVt9N16lfF7tLv9FXNj8AiyNcOi1AQAA To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message