[Wylug-discuss] SERVFAIL in /var/log/named

[Gary Stainburn]

I'm receiving the following error messages in /var/log/named on my DNS server.

It looks like one of my servers is trying to use a DNS based RBL lookup which 
is failing.  Can anyone give me any assistance / advice on how to trace and 
fix he problem.

I've checked my mail server and cannot see any configs that refer to ahbl. Is 
there a way to get the name server to log which IP the request is coming 
from?

This server is inside my network and not accessible from outside.

The errors are:
Sep  4 10:18:22 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'banetele.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:22 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'banetele.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:24 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'beakysmotorcycles.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:24 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'beakysmotorcycles.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:25 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving '97.65.69.118.in-addr.arpa/PTR/IN': 84.19.32.2#53
Sep  4 10:18:26 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving '97.65.69.118.in-addr.arpa/PTR/IN': 210.245.31.130#53
Sep  4 10:18:26 s_sys at eddie named[3464]: unexpected RCODE (REFUSED) 
resolving '97.65.69.118.in-addr.arpa/PTR/IN': 210.245.31.10#53
Sep  4 10:18:27 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'segurosdm.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:27 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'segurosdm.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:28 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'johnandcassie.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:28 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'johnandcassie.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:28 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving '97.65.69.118.in-addr.arpa/PTR/IN': 84.19.32.1#53
Sep  4 10:18:31 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'almanarasoft.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:31 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'almanarasoft.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:33 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'telus.net.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:33 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'telus.net.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:34 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'vlack.nl.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:34 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'vlack.nl.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:35 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving '97.65.69.118.in-addr.arpa/PTR/IN': 210.245.31.130#53
Sep  4 10:18:37 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'wanadoo.fr.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:37 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'wanadoo.fr.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:43 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'alestra.net.mx.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:43 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'mgcotton.com.rhsbl.ahbl.org/A/IN': 84.19.32.2#53
Sep  4 10:18:43 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'alestra.net.mx.rhsbl.ahbl.org/A/IN': 84.19.32.1#53
Sep  4 10:18:43 s_sys at eddie named[3464]: unexpected RCODE (SERVFAIL) 
resolving 'mgcotton.com.rhsbl.ahbl.org/A/IN': 84.19.32.1#53

-- 
Gary Stainburn
Group I.T. Manager
Ringways Garages
http://www.ringways.co.uk