명명 된/바인드/DNS 전체 로깅을 활성화하는 방법은 무엇입니까?

Question

명명 된 서비스에 대한 전체 수준의 로그를 활성화하는 데 도움이되는 named.conf에서 완벽한 로깅 절을 찾으려고합니다. 누군가 여기서 예를들 수 있습니까? 현재 조항이 아래에 나와 있지만 매우 최소한의 로그 만 생성됩니다. 또는 추가 "에 querylog rndc"

logging { 
    channel querylog{ 
      file "/var/log/querylog"; 
      severity debug 10; 
      print-category yes; 
      print-time yes; 
      print-severity yes; 
      }; 
    category queries { querylog;}; 
}; 

Answer 1

나는 일반적으로 각 로그를 자체 채널로 확장 한 다음 별도의 로그 파일로 확장하므로 특정 문제를 디버깅 할 때 문제가 쉽게 발생합니다. 그래서 내 로깅 섹션은 다음과 같습니다

logging { 
    channel default_file { 
     file "/var/log/named/default.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel general_file { 
     file "/var/log/named/general.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel database_file { 
     file "/var/log/named/database.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel security_file { 
     file "/var/log/named/security.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel config_file { 
     file "/var/log/named/config.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel resolver_file { 
     file "/var/log/named/resolver.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel xfer-in_file { 
     file "/var/log/named/xfer-in.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel xfer-out_file { 
     file "/var/log/named/xfer-out.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel notify_file { 
     file "/var/log/named/notify.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel client_file { 
     file "/var/log/named/client.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel unmatched_file { 
     file "/var/log/named/unmatched.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel queries_file { 
     file "/var/log/named/queries.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel network_file { 
     file "/var/log/named/network.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel update_file { 
     file "/var/log/named/update.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel dispatch_file { 
     file "/var/log/named/dispatch.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel dnssec_file { 
     file "/var/log/named/dnssec.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 
    channel lame-servers_file { 
     file "/var/log/named/lame-servers.log" versions 3 size 5m; 
     severity dynamic; 
     print-time yes; 
    }; 

    category default { default_file; }; 
    category general { general_file; }; 
    category database { database_file; }; 
    category security { security_file; }; 
    category config { config_file; }; 
    category resolver { resolver_file; }; 
    category xfer-in { xfer-in_file; }; 
    category xfer-out { xfer-out_file; }; 
    category notify { notify_file; }; 
    category client { client_file; }; 
    category unmatched { unmatched_file; }; 
    category queries { queries_file; }; 
    category network { network_file; }; 
    category update { update_file; }; 
    category dispatch { dispatch_file; }; 
    category dnssec { dnssec_file; }; 
    category lame-servers { lame-servers_file; }; 
}; 

희망이 도움이됩니다.

Answer 2

실행 명령 "querylog 예;" named.conf에 "options {};" 섹션을 클릭하여 해당 채널을 활성화하십시오.

또한 바인드가 chroot 인 경우 올바른 디렉토리를 검사하고 있는지 확인하십시오.