Date: Fri, 29 Jun 2018 21:03:21 -0500 From: Larry Rosenman <ler@FreeBSD.org> To: freebsd-current@FreeBSD.org Subject: DNSSEC/Log Spam for partially DNSSEC domain Message-ID: <20180630020321.6mpusxvbn7fpy64y@ler-imac.local>
index | next in thread | raw e-mail
[-- Attachment #1 --] I'm running Exim, with DNSSEC enabled, and my zone (lerctr.org) is DNSSEC signed, but my dyn.lerctr.org subdomain is NOT DNSSEC signed due to HE.net don't support DNSSEC. I get a ton of: Jun 29 20:12:53 thebighonker exim[37649]: gethostby*.gethostanswer: asked for "borg.lerctr.org IN AAAA", got type "RRSIG" Jun 29 20:12:53 thebighonker exim[37649]: gethostby*.gethostanswer: asked for "borg.lerctr.org IN A", got type "RRSIG" in my logs, which comes from libc: /usr/src/lib/libc/net/getaddrinfo.c: 2092 #ifdef DEBUG 2093 if (type != T_KEY && type != T_SIG && 2094 type != ns_t_dname) 2095 syslog(LOG_NOTICE|LOG_AUTH, 2096 "gethostby*.getanswer: asked for \"%s %s %s\", got type \"%s\"", 2097 qname, p_class(C_IN), p_type(qtype), 2098 p_type(type)); 2099 #endif Is there an easy way to make this quieter? -- Larry Rosenman https://people.FreeBSD.org/~ler/ Phone: +1 214-642-9640 E-Mail: ler@FreeBSD.org US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106 [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQHBBAABCgCrFiEEHjgknedhWzvJgwVzaXyZsatIp30FAls25OktFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3JnbGVyQEZyZWVCU0Qub3JnXxSAAAAAAC4AKGlz c3Vlci1mcHJAbm90YXRpb25zLm9wZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQxRTM4 MjQ5REU3NjE1QjNCQzk4MzA1NzM2OTdDOTlCMUFCNDhBNzdEAAoJEGl8mbGrSKd9 2PQH/1HW88eh+eqANVcwhL7L7PGrJRhk3IAS4UTWclsHYrmtbwzLgMmBpg01009S OyHe88mTpe5GU0Ywxt/3opBz4qeElO6NI5JnFkKL8GWG6/jtLOztgWQlfQC5EXLy f/AXMezEDUHSEY8biME44q0n+udsyVBxLafOpnxyt+jNrcjfNNqoC4NpyvE03YCw vbhdUNBUVuuvlZFru8gwFtFYIvcNCIQj9tnAOhdt9Vf+xHZH2pHfVZtaJ1pJ6OOM TOb54EixaFAzn992KqoiR3hnCO7yWa1KsspCNQBgXaCHrc53IhrSddZQtEJYDsOv aeTJ2YuQlnSbYp4isKRWEj15Dx0= =OzIT -----END PGP SIGNATURE-----help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20180630020321.6mpusxvbn7fpy64y>