Bind9 Error Unexpected Rcode Servfail Resolving
Contents |
Bind logs? named[xxxxxx]: unexpected RCODE (REFUSED) resolving ‘xx.xx.xx.xx.in-addr.arpa/PTR/IN': xxx.xxx.xxx.xxx#53 This is probably because you have a forwarder in your named.conf that refuse your requests. Simply look at the end of the previous line : "xxx.xxx.xxx.xxx#53" and search this address in your named configuration file - it
Error Unexpected Rcode Refused Resolving
should be located inside the forwarders : Shell forwarders { xxx.xxx.xxx.xxx; }; 1 forwarders { named error unexpected rcode refused resolving xxx.xxx.xxx.xxx; }; You need to remove or comment this host to get rid of the error in log or allow your host
Lame Servers Info Error Unexpected Rcode Refused Resolving
to query this server if it belongs to you! Tip : To make sure the remote DNS server you are trying to query is refusing your request, you can try to DIG a host like this replacing rcode refused dns the domain and IP to meet your situation : Shell dig domain.tld @xxx.xxx.xxx.xxx 1 dig domain.tld @xxx.xxx.xxx.xxx Be Sociable, Share! Tweet Category: Servers About Kaven G. System Engineer / Network Administrator View all posts by Kaven G. → Post navigation ← Bind : Transfer of ‘domain.tld' from xx.xx.xx.xx#53 failed receiving responses permission denied Linux : Error running command require /proc could not read procfs → ITechLounge.netLinux : Port forwarding with IPtables Search for: lame server resolving Categories Downloads ITechLounge Mac Multimedia Networking Operating Systems PC Security Servers Storage Virtualization Web Tools.ITechLounge.net |-> BandwidthTest |-> GetMyIP |-> NS Lookup |-> Ping |-> TraceRoute |-> Whois Recent Posts Linux : Port forwarding with IPtables Mac : Unable to negotiate with x.x.x.x port 22: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 Windows : How to enable the Administrator account in Windows Home Edition Linux : How to setup client/server NFS on SuSE Office : How to remove the first three characters of each lines in a Word document? Archives Archives Select Month September 2016 August 2016 July 2016 June 2016 May 2016 April 2016 March 2016 February 2016 January 2016 December 2015 November 2015 October 2015 September 2015 August 2015 July 2015 June 2015 May 2015 April 2015 March 2015 February 2015 January 2015 December 2014 November 2014 October 2014 September 2014 August 2014 July 2014 June 2014 May 2014 April 2014 March 2014 February 2014 January 2014 December 2013 November 2013 October 2013 September 2013 August 2013 July 2013 June 2013 May 2013 April 2013 March 2013 February 2013 January 2013 December 2012 November 2012 October 2012 September 2012 August 2012 July 2012 June 2012 March 2012 February 2012 January 2012 December 2011 November 2011 October 2011 September 2011 August 2011 June 2011 May 2011 Ap
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about
Error (formerr) Resolving
Stack Overflow the company Business Learn more about hiring developers or posting ads with unexpected rcode (servfail) from master us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system
Category Lame-servers {null;};
and network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top http://www.itechlounge.net/2011/12/bind-unexpected-rcode-refused-resolving-xx-xx-xx-xx-in-addr-arpaptrin/ unexpected RCODE REFUSED - eating up log files up vote 1 down vote favorite 1 I have a website which I host myself, and I use bind9 as my DNS server (host my own nameservers etc.). I am having a problem with traffic bandwidth, and my syslog is full of the following type of issue: error (unexpected RCODE REFUSED) resolving 'target-express.com/AAAA/IN': 193.95.142.60#53 error (unexpected RCODE REFUSED) resolving 'target-express.com/A/IN': 2001:7c8:3:2::5#53 In today's http://serverfault.com/questions/672566/unexpected-rcode-refused-eating-up-log-files syslog, there are 144258 instances of this, all related to target-express.com. My questions are: is there anything I can do firewall-wise or bind config to stop this? Why would my bind setup be trying to resolve target-express.com (it's not my domain, nothing to do with me). I have checked my forwarders in named.conf, and none of them match the IPs showing in the logs (they are all basically different IPs, not just 193.95.142.60). My iptables reads: Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere REJECT all -- anywhere loopback/8 reject-with icmp-port-unreachable ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere tcp dpt:http ACCEPT tcp -- anywhere anywhere tcp dpt:https ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT udp -- anywhere anywhere udp dpt:domain ACCEPT tcp -- anywhere anywhere tcp dpt:domain ACCEPT icmp -- anywhere anywhere icmp echo-request LOG all -- anywhere anywhere limit: avg 5/min burst 5 LOG level debug prefix "iptables denied: " REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy ACCEPT) target prot opt source destination REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere UPDATE: I've tried the following now in named.conf.options
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta http://serverfault.com/questions/438235/what-is-the-meaning-of-these-bind-log-messages Discuss the workings and policies of this site About Us Learn more http://ansuz.sooke.bc.ca/entry/152 about Stack Overflow the company Business Learn more about hiring developers or posting ads with us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: unexpected rcode Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top What is the meaning of these BIND log messages? up vote 1 down vote favorite 2 Please clarify for me the meaning of the following BIND messages in syslog, these are from a error unexpected rcode DNS resolver. Whilst I think I understand them, I don't know what all four mean, so I think it's best if someone will clarify for me: 1. Oct 14 18:36:34 resolver1 named[14958]: lame server resolving 'arrivatn.co.uk' (in 'arrivatn.co.uk'?): 212.103.224.56#53 2. Oct 14 18:36:36 resolver1 named[14958]: unexpected RCODE (SERVFAIL) resolving '148.128.183.212.in-addr.arpa/PTR/IN': 212.183.136.42#53 3. Oct 14 18:38:49 resolver1 named[14958]: unexpected RCODE (REFUSED) resolving 'internal-server.ournetwork.com/AAAA/IN': auth.dns.server.ip#53 4. Oct 14 18:39:05 resolver1 named[14958]: client 89.187.127.110#42034: query (cache) 'image.sinajs.cn/A/IN' denied Thank you. logging bind share|improve this question edited Oct 15 '12 at 8:05 asked Oct 14 '12 at 17:50 jwbensley 2,46463664 add a comment| 1 Answer 1 active oldest votes up vote 9 down vote accepted The nameserver it contacted was expected to be authoritative but isn't. The nameserver responded with a SERVFAIL error code. The nameserver responded with a REFUSED error code. The client was denied access to read the cached response for that domain. 1-3 are issues with the configuration of the nameserver for the domains/zones in question, #4 is caused by your local security configuratio
arch art astrology astronomy audio ballad bandicoot cargo charity colour compsci conspiracy copenhagen copyright crossproduct crypto cthulhu dares divination dragon dreams drugs electronics employment environment fandom fiction finance games halloween hardware kde latex linguistics links linux livejournal math meta music myth networking occult odroid personal philosophy pivotx poetry politics pornography privacy programming psychology publishing pudding reference religion scifi security sex socialnet software sonnet spam tarot travel typography web webcomics winnipeg アニメ 作りましょう 写真 宗教 日本語 日記 食べ物 (all) Archives Sep 2016 Jul 2016 May 2016 Apr 2016 Feb 2016 Dec 2015 Nov 2015 Aug 2015 Jun 2015 Jan 2015 Dec 2014 Nov 2014 Oct 2014 Sep 2014 Aug 2014 Jul 2014 Apr 2014 Mar 2014 Feb 2014 Dec 2013 Nov 2013 Aug 2013 Jul 2013 May 2013 Mar 2013 Jan 2013 Nov 2012 Oct 2012 Sep 2012 Aug 2012 Jul 2012 Jun 2012 May 2012 Apr 2012 Mar 2012 Feb 2012 Jan 2012 Dec 2011 Nov 2011 Oct 2011 Sep 2011 Aug 2011 Jul 2011 Jun 2011 May 2011 Apr 2011 Mar 2011 Feb 2011 Jan 2011 Dec 2010 Nov 2010 Oct 2010 Sep 2010 Aug 2010 Jul 2010 Jun 2010 May 2010 Apr 2010 Mar 2010 Jan 2010 Mar 2009 Jul 2008 Aug 2007 Nov 2005 Nov 2004 Aug 2004 Jun 2004 Dec 2003 Nov 2003 Aug 2002 Jun 2002 Oct 2001 Feb 1997 Dec 1969 Syndication « Typographical history of the T... | Home | New KDE, still broken » Fixing "unexpected RCODE (SERVFAIL)" and "unexpected RCODE (REFUSED)" Wed 26 Jan 2011 by mskala Tags used: networking This is another one where I searched the net, the answers I found were very unhelpful, and so I'm posting what worked for me for the benefit of anyone making similar searches. The problem: new ADSL connection from MTS Allstream, which is the deregulated ghost of the Manitoba telecom monopoly. Works pretty well, except they do that damn misguided "helpful" redir