关于named问题，工作大约8小时后久不正常了，停止named也停不了

isalie

Dec 15 09:53:04 sun20 named[730]: starting BIND 9.2.1 -u named
Dec 15 09:53:04 sun20 named: named startup succeeded
Dec 15 09:53:04 sun20 named[730]: using 4 CPUs
Dec 15 09:53:04 sun20 named[730]: loading configuration from '/etc/named.conf'
Dec 15 09:53:04 sun20 named[730]: no IPv6 interfaces found
Dec 15 09:53:04 sun20 named[730]: listening on IPv4 interface lo, 127.0.0.1#53
Dec 15 09:53:05 sun20 named[730]: listening on IPv4 interface eth0, 211.64.133.112#53
Dec 15 09:53:05 sun20 named[730]: listening on IPv4 interface eth1, 192.168.5.1#53
Dec 15 09:53:05 sun20 named[730]: command channel listening on 127.0.0.1#953
Dec 15 09:53:05 sun20 named[730]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1
Dec 15 09:53:05 sun20 named[730]: zone 133.64.***.in-addr.arpa/IN: loaded serial 1
Dec 15 09:53:05 sun20 named[730]: zone 192.168.5.in-addr.arpa/IN: loaded serial 1
Dec 15 09:53:05 sun20 named[730]: zone ****.ouc.edu.cn/IN: loaded serial 17
Dec 15 09:53:05 sun20 named[730]: zone localhost/IN: loaded serial 1
Dec 15 09:53:05 sun20 named[730]: running
Dec 15 09:53:05 sun20 named[730]: zone 192.168.5.in-addr.arpa/IN: sending notifies (serial 1)
Dec 15 09:53:05 sun20 named[730]: zone 133.64.****.in-addr.arpa/IN: sending notifies (serial 1)
Dec 15 09:55:38 sun20 named[730]: client 192.168.5.120#1627: update '****.ouc.edu.cn/IN' denied
Dec 15 09:59:17 sun20 named[730]: client 192.168.5.119#1758: updating zone '****.ouc.edu.cn/IN': update failed: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)
Dec 15 09:59:17 sun20 named[730]: client 192.168.5.119#1761: update '****.ouc.edu.cn/IN' denied
Dec 15 10:09:08 sun20 named[730]: lame server resolving 'cgst.sdkd.net.cn' (in 'sdkd.NET.cn'?): 202.102.152.3#53

Snoopy

是不是有主dns和副dns在里面  ??

同步更新不了是么 ?? 你给更新的文件给chown named.named看看

isalie

我没有设副dns，不过你这么说倒是提醒了我，我是将原来老的服务器移至到新机器上的，原来机器只是将ip改了，其他的内部配置都没有变，难道是这个原因引起的？我将老机器的网卡停掉看看还出问题不，不过还不明白你后面说的更新是什么意思？是dns主副之间的更新？我发现要求更新的ip邮很多，而且其中还有windowsserver的机器，这个也要更新？

isalie

Dec 15 21:49:50 sun20 named[723]: client 192.168.5.120#3941: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 21:50:24 sun20 named[723]: client 192.168.5.120#3951: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 21:50:41 sun20 named[723]: client 192.168.5.120#3959: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 21:50:58 sun20 named[723]: client 192.168.5.120#3965: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 21:54:52 sun20 named[723]: client 192.168.5.120#3974: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 21:55:27 sun20 named[723]: client 192.168.5.120#3980: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 22:07:40 sun20 named[723]: client 192.168.5.130#2844: updating zone 'orsi.ouc.edu.cn/IN': update failed: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)
Dec 15 22:07:40 sun20 named[723]: client 192.168.5.130#2847: update 'orsi.ouc.edu.cn/IN' denied
Dec 15 22:09:48 sun20 named[723]: client 192.168.5.53#1596: updating zone 'orsi.ouc.edu.cn/IN': update failed: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)
Dec 15 22:09:48 sun20 named[723]: client 192.168.5.53#1599: update 'orsi.ouc.edu.cn/IN' denied

isalie

192.168.5.120是一台windows2000 server
192.68.5.130是winxp sp2
192.168.5.53不清楚是什么机器
这些都能发起更新域的要求码？

isalie

目前工作还算正常，不知道这次能撑多久

isalie

RHSA-2003:135 - Security Advisory
  Details
   Packages
   Affected Systems

  Synopsis
  Updated 2.4 kernel fixes USB storage

  Issued: 2003-04-08
  Updated: 2003-04-08

  Topic
  Updated kernel packages for Red Hat Linux 9 are now available.
  The kernel package version 2.4.20-6 has a security hole in ptrace.
  Using USB CD-ROMs on some ServerWorks systems can hang older versions
  of the kernel.
  Description
  The Linux kernel handles the basic functions of the operating system.

  A vulnerability in ptrace handling has been found in version 2.4.20-6
  of the kernel. This vulnerability makes it possible for local users to
  gain elevated (root) privileges without authorization. This vulnerability
  is fixed in kernel-2.4.20-8 and kernel-2.4.20-9.

  Please note this vulnerability only affects Red Hat Linux 9 boxed sets
  manufactured for distribution within the United States. The part numbers,
  which can be found on the bottom flap of the box, are RHF0120US and
  RHF0121US. Copies of Red Hat Linux 9 obtained through other means (such as
  from Red Hat Network, FTP, or international boxed sets) already contain
  kernel-2.4.20-8 and are therefore not vulnerable to this issue.

  An NPTL support defect in the kernel causes bind not to restart on
  uniprocessor systems; this bug has been fixed in kernel-2.4.20-9.

  USB mass storage devices (in particular, USB CD-ROMs) and the ohci driver
  sometimes causes system hangs; this defect has been fixed.

  Additionally, support for the tg3, e100, and e1000 drivers has been added.
  Solution
  Before applying this update, make sure all previously released errata
  relevant to your system have been applied.

  To use Red Hat Network to upgrade the kernel, launch the Red Hat Update
  Agent with the following command:

  up2date

  This will start an interactive process that will result in the appropriate
  RPMs being upgraded on your system. Note that you need to select the
  kernel explicitly if you are using the default configuration of up2date.

  To install kernel packages manually, use "rpm -ivh < package> " and
  modify system settings to boot the kernel you have installed. To
  do this, edit /boot/grub/grub.conf and change the default entry to
  "default=0" (or, if you have chosen to use LILO as your boot loader,
  edit /etc/lilo.conf and run lilo)

  Do not use "rpm -Uvh" as that will remove your running kernel binaries
  from your system. You may use "rpm -e" to remove old kernels after
  determining that the new kernel functions properly on your system.
  Affected Channels
  Red Hat Linux 9 i386

  Fixes
  (none)
  Keywords
  bind, cdrom, netdump, ptrace, storage, usb
  CVEs
  CAN-2003-0127
  References
  (none)
  Notes
  (none)

  Copyright &copy; 2001-04 Red Hat, Inc. All rights reserved. Legal statemen

isalie

似乎kernel的问题导致了named的不能停止