Thread Info
  • State Not Answered
  • Replies 15 replies
  • Subscribers 0 subscribers
  • Views 7434 views
  • Users 0 members are here
Options
Suggested

[9.060][ANSWERED] Dns proxy is full log is error

utm_kid
Hello ,
dns proxy is full of error with  differant domains 
 
[HTML] 
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 208.67.220.220#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 208.67.222.222#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.5.5.241#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.228.79.201#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.33.4.12#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 199.7.91.13#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 128.63.2.53#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 199.7.83.42#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 198.41.0.4#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.203.230.10#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.112.36.4#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.36.148.17#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 192.58.128.30#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 193.0.14.129#53
2013:01:21-08:42:40 acenn named[4467]: error (network unreachable) resolving 'wontresolve.doesntexist.abc/A/IN': 202.12.27.33#53[/HTML]


[HTML]  
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 208.67.220.220#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 198.41.0.4#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.228.79.201#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.33.4.12#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 199.7.91.13#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.203.230.10#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.5.5.241#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.112.36.4#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 128.63.2.53#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.36.148.17#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.58.128.30#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 193.0.14.129#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 199.7.83.42#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 202.12.27.33#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 208.67.222.222#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 208.67.220.220#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 198.41.0.4#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.228.79.201#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.33.4.12#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 199.7.91.13#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.203.230.10#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.5.5.241#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.112.36.4#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 128.63.2.53#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.36.148.17#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 192.58.128.30#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 193.0.14.129#53
2013:01:21-21:28:57 acenn named[4478]: error (network unreachable) resolving 'iprep3.t.ctmail.com/A/IN': 199.7.83.42#53[/HTML]

thanks
Parents
  • 0
    Hi All
    I'm also getting lots of errors in the DNS Proxy logs.
    I have attached the complete logs. (I hope these help).

    The DNS forwarders are setup in two Availability Groups. One for IPv4 and one for IPv6. (Which is the same setup I use for a 9.0 UTM and just checked DNS logs and all is fine).

    Mark
    eg


    Live Log: DNS proxy 
    Filter: 

    2013:01:30-13:43:03 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00n292p6o4p3721so5r81s072186423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s21p589on7762609276p6p40o0s97n9opp2063273prp.s11p41832rsrqs2q3551n61qnrrn4q75q5o31oo2q1nson577s7r980sno90718.7pq021r290612s0onq7.76659046np7n8n91.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64157: invalid response
    2013:01:30-13:43:03 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00n292p6o4p3721so5r81s072186423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s21p589on7762609276p6p40o0s97n9opp2063273prp.s11p41832rsrqs2q3551n61qnrrn4q75q5o31oo2q1nson577s7r980sno90718.7pq021r290612s0onq7.76659046np7n8n91.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:04 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 3.1o19sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2345nn60qnpoop45ppos472491o066qrqps0ss8s8rp.59762sr74q9sns001344517q83qr6344r79q7npn.ss690374o10r18r53015p61p0n60oo81r29677n6.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64744: invalid response
    2013:01:30-13:43:04 fmaster named[13174]: error (FORMERR) resolving '3.1o19sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2345nn60qnpoop45ppos472491o066qrqps0ss8s8rp.59762sr74q9sns001344517q83qr6344r79q7npn.ss690374o10r18r53015p61p0n60oo81r29677n6.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:05 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2oq56353so1ps56282rr248s6sn3s47snnn031532q2.s11p418524np9q2r3r44n2455pqq6350r79q7rpno1082s476p7r980snoq80q1.1.76659046np7n8n91.i.00.s.sophosxl.net/TXT for client 172.16.0.5#49356: invalid response
    2013:01:30-13:43:05 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2oq56353so1ps56282rr248s6sn3s47snnn031532q2.s11p418524np9q2r3r44n2455pqq6350r79q7rpno1082s476p7r980snoq80q1.1.76659046np7n8n91.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:06 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 3.1o19sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s271824p5sq2rpq30qpop15n74010630o4ps0ss8s8rp.59762sr14q9sns001344517q83qr6344r79q7rpn.q40r4978r253r0p17n7s973s210s8p18rn46ss6q.i.00.s.sophosxl.net/TXT for client 172.16.0.5#65188: invalid response
    2013:01:30-13:43:06 fmaster named[13174]: error (FORMERR) resolving '3.1o19sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s271824p5sq2rpq30qpop15n74010630o4ps0ss8s8rp.59762sr14q9sns001344517q83qr6344r79q7rpn.q40r4978r253r0p17n7s973s210s8p18rn46ss6q.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:07 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s296317s33r292nr0p648819q5q1507063n2q39qs9q2.p4347p9s24s1p42r3r44n2455pqq6356r79q7rpno1082s476p7r980snoq8091.1.33oq7n14q22q9qp0.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64558: invalid response
    2013:01:30-13:43:07 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s296317s33r292nr0p648819q5q1507063n2q39qs9q2.p4347p9s24s1p42r3r44n2455pqq6356r79q7rpno1082s476p7r980snoq8091.1.33oq7n14q22q9qp0.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:14 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving iprep4.t.ctmail.com/A for client 127.0.0.1#39297: invalid response
    2013:01:30-13:43:14 fmaster named[13174]: error (FORMERR) resolving 'iprep4.t.ctmail.com/A/IN': 208.76.61.4#53
    2013:01:30-13:43:23 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving resolver.4.geo.ctmail.com/A for client 127.0.0.1#45957: invalid response
    2013:01:30-13:43:23 fmaster named[13174]: error (FORMERR) resolving 'resolver.4.geo.ctmail.com/A/IN': 208.76.61.4#53
    named-2013-01-28.zip
Reply
  • 0
    Hi All
    I'm also getting lots of errors in the DNS Proxy logs.
    I have attached the complete logs. (I hope these help).

    The DNS forwarders are setup in two Availability Groups. One for IPv4 and one for IPv6. (Which is the same setup I use for a 9.0 UTM and just checked DNS logs and all is fine).

    Mark
    eg


    Live Log: DNS proxy 
    Filter: 

    2013:01:30-13:43:03 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00n292p6o4p3721so5r81s072186423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s21p589on7762609276p6p40o0s97n9opp2063273prp.s11p41832rsrqs2q3551n61qnrrn4q75q5o31oo2q1nson577s7r980sno90718.7pq021r290612s0onq7.76659046np7n8n91.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64157: invalid response
    2013:01:30-13:43:03 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00n292p6o4p3721so5r81s072186423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s21p589on7762609276p6p40o0s97n9opp2063273prp.s11p41832rsrqs2q3551n61qnrrn4q75q5o31oo2q1nson577s7r980sno90718.7pq021r290612s0onq7.76659046np7n8n91.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:04 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 3.1o19sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2345nn60qnpoop45ppos472491o066qrqps0ss8s8rp.59762sr74q9sns001344517q83qr6344r79q7npn.ss690374o10r18r53015p61p0n60oo81r29677n6.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64744: invalid response
    2013:01:30-13:43:04 fmaster named[13174]: error (FORMERR) resolving '3.1o19sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2345nn60qnpoop45ppos472491o066qrqps0ss8s8rp.59762sr74q9sns001344517q83qr6344r79q7npn.ss690374o10r18r53015p61p0n60oo81r29677n6.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:05 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2oq56353so1ps56282rr248s6sn3s47snnn031532q2.s11p418524np9q2r3r44n2455pqq6350r79q7rpno1082s476p7r980snoq80q1.1.76659046np7n8n91.i.00.s.sophosxl.net/TXT for client 172.16.0.5#49356: invalid response
    2013:01:30-13:43:05 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00n292p5ssp37145pqr8r31p082r423o3p0p376qp9qnn66rrs5ps8573.817p6r741n536393648s2oq56353so1ps56282rr248s6sn3s47snnn031532q2.s11p418524np9q2r3r44n2455pqq6350r79q7rpno1082s476p7r980snoq80q1.1.76659046np7n8n91.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:06 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 3.1o19sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s271824p5sq2rpq30qpop15n74010630o4ps0ss8s8rp.59762sr14q9sns001344517q83qr6344r79q7rpn.q40r4978r253r0p17n7s973s210s8p18rn46ss6q.i.00.s.sophosxl.net/TXT for client 172.16.0.5#65188: invalid response
    2013:01:30-13:43:06 fmaster named[13174]: error (FORMERR) resolving '3.1o19sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s271824p5sq2rpq30qpop15n74010630o4ps0ss8s8rp.59762sr14q9sns001344517q83qr6344r79q7rpn.q40r4978r253r0p17n7s973s210s8p18rn46ss6q.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:07 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving 4.1o18sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s296317s33r292nr0p648819q5q1507063n2q39qs9q2.p4347p9s24s1p42r3r44n2455pqq6356r79q7rpno1082s476p7r980snoq8091.1.33oq7n14q22q9qp0.i.00.s.sophosxl.net/TXT for client 172.16.0.5#64558: invalid response
    2013:01:30-13:43:07 fmaster named[13174]: error (FORMERR) resolving '4.1o18sr00o48r59p9p3734oo5r81r8ns5q5423o3p0p376qp9qnn66rrs5ps8573.817p1r741n536393648s296317s33r292nr0p648819q5q1507063n2q39qs9q2.p4347p9s24s1p42r3r44n2455pqq6356r79q7rpno1082s476p7r980snoq8091.1.33oq7n14q22q9qp0.i.00.s.sophosxl.net/TXT/IN': 208.76.61.4#53
    2013:01:30-13:43:14 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving iprep4.t.ctmail.com/A for client 127.0.0.1#39297: invalid response
    2013:01:30-13:43:14 fmaster named[13174]: error (FORMERR) resolving 'iprep4.t.ctmail.com/A/IN': 208.76.61.4#53
    2013:01:30-13:43:23 fmaster named[13174]: DNS format error from 208.76.61.4#53 resolving resolver.4.geo.ctmail.com/A for client 127.0.0.1#45957: invalid response
    2013:01:30-13:43:23 fmaster named[13174]: error (FORMERR) resolving 'resolver.4.geo.ctmail.com/A/IN': 208.76.61.4#53
    named-2013-01-28.zip
Children