안녕하세요..고수님의 조언을 바랄께요..
log에 아래와 같은 메세지가 나오는군요...
Aug 31 18:47:31 www named[591]: Cleaned cache of 8 RRsets
Aug 31 18:47:31 www named[591]: USAGE 967715251 967690051 CPU=0.05u/0.04s CHILDCPU=0u/0s
Aug 31 18:47:31 www named[591]: NSTATS 967715251 967690051 A=79 PTR=116 MX=14 ANY=33
Aug 31 18:47:31 www named[591]: XSTATS 967715251 967690051 RR=85 RNXD=3 RFwdR=62 RDupR=0 RFail=0 RFErr=0 RErr=0 RAXFR=0
RLame=0 ROpts=0 SSysQ=19 SAns=199 SFwdQ=44 SDupQ=12 SErr=0 RQ=242 RIQ=0 RFwdQ=0 RDupQ=0 RTCP=0 SFwdR=62 SFail=0 SFErr=0S
NaAns=144 SNXD=0 Aug 31 18:56:12 www inetd[384]: auth/tcp: bind: Address already in use Aug 31 18:57:35 www named[591]:
sysquery: findns error (NXDOMAIN) on ns.dadada.com?
log에 보면은요... auth/tcp : bind: Addressalready in use가 왜 나오나요?
sysquery: findns error (NXDOMAIN) on ns.dadada.com? 지는 왜나오는지요?
그리고 그위에 있는 메세지는 오류인가요...
밑에 설정파을을 같이 봐주세요..
설정이 잘못되어서 나오는것인지...아님 해커가 침입을하여서 그런것인지
조언을 부탁합니다...
==============================/etc/named.conf ==================
// generated by named-bootconf.pl
options {
directory "/var/named";
};
zone "." {
type hint;
file "named.ca";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "named.local";
};
zone "dadada.com" IN { type master; file "zone-default"; };
==============================/etc/named.boot ==================
;
; a caching only nameserver config
;
directory /var/named
cache . named.ca
primary 0.0.127.in-addr.arpa named.local
primary dadada.com zone-default
==============================/var/named/named.local ==================
@ IN SOA ns.dadada.com. root.dadada.com. (
1999022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS ns.dadada.com.
1 IN PTR localhost.
==============================/var/named/zone-default ==================
@ IN SOA ns.dadada.com. root.dadada.com. (
1999022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS ns.dadada.com.
IN A 111.111.22.22
IN MX 10 @
www IN CNAME @
mail IN CNAME @
1 IN PTR localhost.
아래의 메세지[root에게 mail이 오네요]가 왜 오는지 모르겠어요.....
도움을 부탁할께요..
From root Sat Aug 26 04:02:41 2000
Return-Path:<root at www.dadada.com>
Received:(from root@localhost)
by www.dadada.com (8.10.1/8.10.1) id e7PJ2fP01223
for root; Sat, 26 Aug 2000 04:02:41 +0900
Date: Sat, 26 Aug 2000 04:02:41 +0900
From: root <root at www.dadada.com>
Message-Id:<200008251902.e7PJ2fP01223 at www.dadada.com>
To: root at www.dadada.com Subject: File integrity report
This is an automated report of possible file integrity changes, generated by
the Tripwire integrity checker. To tell Tripwire that a file or entire
directory tree is valid, as root run:
/usr/sbin/tripwire -update [pathname|entry]
If you wish to enter an interactive integrity checking and verification
session, as root run:
/usr/sbin/tripwire -interactive
Changed files/directories include:
From root Sat Aug 26 04:02:41 2000
Return-Path:<root at www.dadada.com>
Received:(from root@localhost)
by www.dadada.com (8.10.1/8.10.1) id e7PJ20U01071
for root; Sat, 26 Aug 2000 04:02:00 +0900
Date: Sat, 26 Aug 2000 04:02:00 +0900
Message-Id:<200008251902.e7PJ20U01071 at www.dadada.com>
From: root at www.dadada.com (Cron Daemon)
To: root at www.dadada.com Subject: Cron <root@www> run-parts /etc/cron.daily
X-Cron-Env:<SHELL=/bin/bash>
X-Cron-Env:<PATH=/sbin:/bin:/usr/sbin:/usr/bin>
X-Cron-Env:<MAILTO=root>
X-Cron-Env:<HOME=/>
X-Cron-Env:<LOGNAME=root>
error: httpd:1 duplicate log entry for /var/log/httpd/access_log
/usr/sbin/tripwire: database file '/var/spool/tripwire/tw.db_www.dadada.com' does not exist! Aborting...