Re: Bind Service & Script
"Klaipedaville on Google" <[email protected]> Sat, 3 Nov 2018 13:58:23 +0200
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <E82FE5FD9F7D4E62BEA6481FA401A06E@Computer> |
This is a multi-part message in MIME format.
--===============7944531677213123362==
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0057_01D4737D.494FF4B0"
This is a multi-part message in MIME format.
------=_NextPart_000_0057_01D4737D.494FF4B0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hi Frank,
I see you=E2=80=99re still on it. Well, honestly speaking I gave up =
after I had spent 3 days trying to troubleshoot it. Instead, I wrote a =
very simple bash script on my own as I found it to be much easier, =
faster, and simpler. Although I have bind also running through Logwatch =
and it=E2=80=99s suits me perfectly fine in combination of these two.
I still believe that the existing bind's (named) service and script =
require an update / re-writing / re-coding, the problem here is not in =
configuration. But that's just my opinion of course.
Regards,
Dennis
From: Frank Crawford=20
Sent: Saturday, November 3, 2018 10:46
To: logwatch-devel=20
Subject: Re: [Logwatch-devel] Bind Service & Script
Folks,
I've been meaning to update the list on the fix for this, just in case =
anyone else has the same problem. The main fix was to create the file =
/etc/logwatch/conf/services/named.conf with the following entries:
# Logfiles to review
LogFile =3D /var/log/bind/bind.log
# Note this exact string depends on the settings of print-category, =
print-severity and print-time.
# The below setting assumes all three are enabled.
*RemoveHeaders =3D "^\d\d-\w{3}-\d\d\d\d \d\d:\d\d:\d\d\.\d\d\d \w*: =
\w*: "
However, you also need to comment out the "*OnlyService" option in the =
original configuration file (probably =
/usr/share/logwatch/conf/services/named.conf) as I cannot see anyway to =
suppress it in the local configuration file.
If anyone knows a way to do it, I'd like to hear it.
Regards
Frank
On Sat, 2018-04-21 at 15:27 +0300, Klaipedaville on Google wrote:
Hi Frank,
Thank you so much for your replying. I appreciate.
Well, I would like it simply to report on errors, denied queries, =
security, unexpected RCODEs, and refused connections both ways because =
right now it does not report anything at all when I type the following =
for example:
logwatch --detail high --service name --range all
As you can see I ask it to advise me on all the entries there are out =
there, not only daily ones, but alas, there is nothing reported, no =
extension of its standard logging reported, no any other output reported =
at all. I have not deleted any of my log files at all yet but it still =
won=E2=80=99t pick them up. I also typed =E2=80=93range all, --range =
today, --range yesterday and so on and so forth which should have =
reported at least something but it does not happen. Thus, I assumed that =
the "name" script and service found in Logwatch could not really read =
and parse Bind9=E2=80=99s log files.=20
I specified of course my custom log files in Logwatch, that is I set =
the path in my copy of named.conf to be like this in ../logfiles:
LogFile =3D /var/log/bind/bind.log
and I also defined it in my copy of named.conf in ../services to read =
my bind.log file like this:
LogFile =3D bind
I've also configured different scripts and services of Logwatch before =
and they have been running perfectly well, with the only exception that =
they were the "exact" ones so speak. For instance I customized dovecot =
for dovecot, proftpd for proftpd, spamassassin for spamassassin and so =
on but here we have to customize the named for bind9 which in my =
understanding might be totally different and may require this named =
script=E2=80=99s and service=E2=80=99s thorough re-writing (completely =
new script?). However, I am glad you are saying I am all wrong and I =
would be thankful if you could assist me.
It would be also nice to take a look at your bind9=E2=80=99s logging =
example, the output it generates, and the output your named creates out =
of it when it's parsed.
Many thanks in advance!
Regards,
Dennis
From: Frank Crawford=20
Sent: Saturday, April 21, 2018 09:04
To: Klaipedaville on Google ; logwatch-devel ; Orion Poplawski=20
Subject: Re: [Logwatch-devel] Bind Service & Script
Dennis,
Firstly, I would say that what you are logging there is an extension =
of the standard logging in bind. While you have defined a new channel, =
you haven't noted what categories are going there. The default_syslog =
channel doesn't include category, severity or time, hence the default =
logwatch module doesn't pick up those extra fields.
Anyway, you have two different items of concern, you can easily =
configure logwatch to pickup the bind9 file by editing the appropriate =
service configuration file.
Now, what is the appropriate service gets a bit more tricky. Firstly, =
what do you expect it to report on that particular output? It looks more =
like what you would dump doing debugging of queries, especially since =
you have a 5Mb limit on the size, with 3 copies, so it would rotate =
pretty quickly, and logwatch really is normally run on daily logs, not =
transient logs.
Once you work out what you want to report, I'd argue that you still =
want to use the named script, it already understands bind9 output (I run =
it across my nameservers and it reports the operational issues fine). =
You would probably want to add additional pattern matches because, as =
you say, it doesn't currently match those lines. I can guess some stats =
you may want, but that may be different to your requirements.
If you can work out what you want I can suggest what you need to do to =
get it reported, and then it can be rolled into the distribution.
Regards
Frank
On Thu, 2018-04-19 at 21:19 +0300, Klaipedaville on Google wrote:
Hi Frank,
Thank you for replying.
Well, the "named module" that is the name script and service of =
Logwatch do not really parse the Bind9=E2=80=99s log files as =
I=E2=80=99ve mentioned in my first message before. Bind recommends =
custom logging because when you leave it "dropping" right into your =
syslog it does not really reflect the real picture so to speak. Now when =
you set it up as per Bind=E2=80=99s recommendations then there is =
nothing reported by Logwatch because there is nothing "dumped" into your =
syslog any more where Logwatch picks up "named module logging" from. =
That=E2=80=99s why I was asking if there were any work arounds to make =
Logwatch report on Bind9's?.. I thought that Bind=E2=80=99s script and =
service in Logwatch were required.. was I wrong? Thanks.
Regards,
Dennis
P.S. I provided log examples in my first email to try to parse it / =
feed it through "named module"... it did not work my side...
From: Frank Crawford=20
Sent: Thursday, April 19, 2018 15:05
To: Klaipedaville on Google ; logwatch-devel ; Orion Poplawski=20
Subject: Re: [Logwatch-devel] Bind Service & Script
Dennis,
Isn't the "named" module what you need? It does look through =
/var/log/messages for the output, not a dedicated bind file, but still =
it is what I see for my DNS server output.
Frank
On Wed, 2018-04-18 at 17:28 +0300, Klaipedaville on Google wrote:
Hello everybody, =20
I can=E2=80=99t believe it that the latest Logwatch 7.4.3 still =
does not have any Bind services and scripts. Am I wrong? I tried to =
"feed" bind9=E2=80=99s regular log files to named but it won=E2=80=99t =
parse them. Could anybody advise, please on how to make Logwatch =
"report" Bind? The standard / regular log files in Bind9 are setup like =
this:
logging {
channel bind_log {
file "/var/log/bind/bind.log" versions 3 size 5m;
severity info;
print-category yes;
print-severity yes;
print-time yes;
};
};
and what the logging produces as the outcome looks like this:
18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query: ns2.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query: a10-66.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: =
query: a9-66.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: query: =
ns7.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query: ns3.barcap.com IN A + (1.2.3.4)
18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query: a1-71.akam.net IN A + (1.2.3.4)
18-Apr-2018 11:36:14.964 queries: info: client 1.12.3.4#52132: =
query: a12-64.akam.net IN A + (1.2.3.4)
I would be really grateful for any pointers, suggestions, =
recommendations, assistance.
Many thanks in advance!
Regards,
Dennis
=20
-------------------------------------------------------------------------=
-----Check out the vibrant tech community on one of the world's =
mostengaging tech sites, Slashdot.org! =
http://sdm.link/slashdot_______________________________________________Lo=
gwatch-devel mailing =
listLogwatch-devel-5NWGOfrQmneRv+LV9MX5ugtCRVl27V+i0wdF1cv0I5s@public.gmane.org://lists.sourceforge.net/lis=
ts/listinfo/logwatch-devel
-------------------------------------------------------------------------=
-------
-------------------------------------------------------------------------=
-------
_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel
------=_NextPart_000_0057_01D4737D.494FF4B0
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
<HTML dir=3Dltr><HEAD></HEAD>
<BODY style=3D"DIRECTION: ltr; TEXT-ALIGN: left" dir=3Dltr>
<DIV dir=3Dltr>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Hi Frank,</DIV>
<DIV> </DIV>
<DIV>I see you=E2=80=99re still on it. Well, honestly speaking I gave up =
after I had=20
spent 3 days trying to troubleshoot it. Instead, I wrote a very simple =
bash=20
script on my own as I found it to be much easier, faster, and simpler. =
Although=20
I have bind also running through Logwatch and it=E2=80=99s suits me =
perfectly fine in=20
combination of these two.</DIV>
<DIV> </DIV>
<DIV>I still believe that the existing bind's (named) service and script =
require=20
an update / re-writing / re-coding, the problem here is not in =
configuration.=20
But that's just my opinion of course.</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dennis</DIV>
<DIV> </DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: normal; =
COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; DISPLAY: =
inline">
<DIV style=3D"FONT: 10pt tahoma">
<DIV> </DIV>
<DIV style=3D"BACKGROUND: #f5f5f5">
<DIV style=3D"font-color: black"><B>From:</B> <A =
[email protected]=20
href=3D"mailto:[email protected]">Frank Crawford</A> </DIV>
<DIV><B>Sent:</B> Saturday, November 3, 2018 10:46</DIV>
<DIV><B>To:</B> <A title=3Dlogwatch-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org=20
href=3D"mailto:[email protected]">logwatch-devel</A> =
</DIV>
<DIV><B>Subject:</B> Re: [Logwatch-devel] Bind Service &=20
Script</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: normal; =
COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; DISPLAY: =
inline">
<DIV>Folks,</DIV>
<DIV> </DIV>
<DIV>I've been meaning to update the list on the fix for this, just in =
case=20
anyone else has the same problem. The main fix was to create the file=20
/etc/logwatch/conf/services/named.conf with the following entries:</DIV>
<DIV> </DIV>
<DIV># Logfiles to review</DIV>
<DIV>LogFile =3D /var/log/bind/bind.log</DIV>
<DIV> </DIV>
<DIV># Note this exact string depends on the settings of print-category, =
print-severity and print-time.</DIV>
<DIV># The below setting assumes all three are enabled.</DIV>
<DIV>*RemoveHeaders =3D "^\d\d-\w{3}-\d\d\d\d \d\d:\d\d:\d\d\.\d\d\d =
\w*: \w*:=20
"</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>However, you also need to comment out the "*OnlyService" option in =
the=20
original configuration file (probably=20
/usr/share/logwatch/conf/services/named.conf) as I cannot see anyway to =
suppress=20
it in the local configuration file.</DIV>
<DIV> </DIV>
<DIV>If anyone knows a way to do it, I'd like to hear it.</DIV>
<DIV> </DIV>
<DIV>Regards</DIV>
<DIV>Frank</DIV>
<DIV> </DIV>
<DIV>On Sat, 2018-04-21 at 15:27 +0300, Klaipedaville on Google =
wrote:</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: =
#729fcf 2px solid"=20
type=3D"cite">
<DIV dir=3Dltr>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: =
#000000">
<DIV>Hi Frank,</DIV>
<DIV> </DIV>
<DIV>Thank you so much for your replying. I appreciate.</DIV>
<DIV> </DIV>
<DIV>Well, I would like it simply to report on errors, denied queries, =
security, unexpected RCODEs, and refused connections both ways because =
right=20
now it does not report anything at all when I type the following for=20
example:</DIV>
<DIV> </DIV>
<DIV>logwatch --detail high --service name --range all</DIV>
<DIV> </DIV>
<DIV>As you can see I ask it to advise me on all the entries there are =
out=20
there, not only daily ones, but alas, there is nothing reported, no =
extension=20
of its standard logging reported, no any other output reported at all. =
I have=20
not deleted any of my log files at all yet but it still won=E2=80=99t =
pick them up. I=20
also typed =E2=80=93range all, --range today, --range yesterday and so =
on and so forth=20
which should have reported at least something but it does not happen. =
Thus, I=20
assumed that the "name" script and service found in Logwatch could not =
really=20
read and parse Bind9=E2=80=99s log files. </DIV>
<DIV> </DIV>
<DIV>I specified of course my custom log files in Logwatch, that is I =
set the=20
path in my copy of named.conf to be like this in ../logfiles:</DIV>
<DIV> </DIV>
<DIV>LogFile =3D /var/log/bind/bind.log</DIV>
<DIV> </DIV>
<DIV>and I also defined it in my copy of named.conf in ../services to =
read my=20
bind.log file like this:</DIV>
<DIV> </DIV>
<DIV>LogFile =3D bind</DIV>
<DIV> </DIV>
<DIV>I've also configured different scripts and services of Logwatch =
before=20
and they have been running perfectly well, with the only exception =
that they=20
were the "exact" ones so speak. For instance I customized dovecot for =
dovecot,=20
proftpd for proftpd, spamassassin for spamassassin and so on but here =
we have=20
to customize the named for bind9 which in my understanding might be =
totally=20
different and may require this named script=E2=80=99s and =
service=E2=80=99s thorough=20
re-writing (completely new script?). However, I am glad you are saying =
I am=20
all wrong and I would be thankful if you could assist me.</DIV>
<DIV> </DIV>
<DIV>It would be also nice to take a look at your bind9=E2=80=99s =
logging example, the=20
output it generates, and the output your named creates out of it when =
it's=20
parsed.</DIV>
<DIV> </DIV>
<DIV>Many thanks in advance!</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dennis</DIV>
<DIV> </DIV>
<DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: =
normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; =
DISPLAY: inline"><FONT=20
size=3D3 face=3DCalibri></FONT></DIV>
<DIV style=3D"FONT: 10pt tahoma">
<DIV style=3D"BACKGROUND: #f5f5f5">
<DIV style=3D"font-color: black"><B>From:</B> <A =
[email protected]=20
href=3D"mailto:[email protected]">Frank Crawford</A> </DIV>
<DIV><B>Sent:</B> Saturday, April 21, 2018 09:04</DIV>
<DIV><B>To:</B> <A [email protected]=20
href=3D"mailto:[email protected]">Klaipedaville on Google</A> ; =
<A=20
title=3Dlogwatch-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org=20
=
href=3D"mailto:[email protected]">logwatch-devel</A> =
; <A=20
[email protected] href=3D"mailto:[email protected]">Orion =
Poplawski</A> </DIV>
<DIV><B>Subject:</B> Re: [Logwatch-devel] Bind Service &=20
Script</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: =
normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; =
DISPLAY: inline">
<DIV>Dennis,</DIV>
<DIV> </DIV>
<DIV>Firstly, I would say that what you are logging there is an =
extension of=20
the standard logging in bind. While you have defined a new channel, =
you=20
haven't noted what categories are going there. The default_syslog =
channel=20
doesn't include category, severity or time, hence the default logwatch =
module=20
doesn't pick up those extra fields.</DIV>
<DIV> </DIV>
<DIV>Anyway, you have two different items of concern, you can easily =
configure=20
logwatch to pickup the bind9 file by editing the appropriate service=20
configuration file.</DIV>
<DIV> </DIV>
<DIV>Now, what is the appropriate service gets a bit more tricky. =
Firstly,=20
what do you expect it to report on that particular output? It looks =
more like=20
what you would dump doing debugging of queries, especially since you =
have a=20
5Mb limit on the size, with 3 copies, so it would rotate pretty =
quickly, and=20
logwatch really is normally run on daily logs, not transient =
logs.</DIV>
<DIV> </DIV>
<DIV>Once you work out what you want to report, I'd argue that you =
still want=20
to use the named script, it already understands bind9 output (I run it =
across=20
my nameservers and it reports the operational issues fine). You would =
probably=20
want to add additional pattern matches because, as you say, it doesn't =
currently match those lines. I can guess some stats you may want, but =
that may=20
be different to your requirements.</DIV>
<DIV> </DIV>
<DIV>If you can work out what you want I can suggest what you need to =
do to=20
get it reported, and then it can be rolled into the =
distribution.</DIV>
<DIV> </DIV>
<DIV>Regards</DIV>
<DIV>Frank</DIV>
<DIV> </DIV>
<DIV>On Thu, 2018-04-19 at 21:19 +0300, Klaipedaville on Google =
wrote:</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: =
#729fcf 2px solid"=20
type=3D"cite">
<DIV dir=3Dltr>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: =
#000000">
<DIV>Hi Frank,</DIV>
<DIV> </DIV>
<DIV>Thank you for replying.</DIV>
<DIV> </DIV>
<DIV>Well, the "named module" that is the name script and service of =
Logwatch do not really parse the Bind9=E2=80=99s log files as =
I=E2=80=99ve mentioned in my=20
first message before. Bind recommends custom logging because when =
you leave=20
it "dropping" right into your syslog it does not really reflect the =
real=20
picture so to speak. Now when you set it up as per Bind=E2=80=99s =
recommendations=20
then there is nothing reported by Logwatch because there is nothing =
"dumped"=20
into your syslog any more where Logwatch picks up "named module =
logging"=20
from. That=E2=80=99s why I was asking if there were any work arounds =
to make=20
Logwatch report on Bind9's?.. I thought that Bind=E2=80=99s script =
and service in=20
Logwatch were required.. was I wrong? Thanks.</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dennis</DIV>
<DIV> </DIV>
<DIV>P.S. I provided log examples in my first email to try to parse =
it /=20
feed it through "named module"... it did not work my side...</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: =
normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; =
DISPLAY: inline">
<DIV style=3D"FONT: 10pt tahoma">
<DIV><FONT size=3D3 face=3DCalibri></FONT> </DIV>
<DIV style=3D"BACKGROUND: #f5f5f5">
<DIV style=3D"font-color: black"><B>From:</B> <A=20
[email protected] =
href=3D"mailto:[email protected]">Frank=20
Crawford</A> </DIV>
<DIV><B>Sent:</B> Thursday, April 19, 2018 15:05</DIV>
<DIV><B>To:</B> <A [email protected]=20
href=3D"mailto:[email protected]">Klaipedaville on Google</A> =
; <A=20
title=3Dlogwatch-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org=20
=
href=3D"mailto:[email protected]">logwatch-devel</A> =
; <A=20
[email protected] href=3D"mailto:[email protected]">Orion =
Poplawski</A> </DIV>
<DIV><B>Subject:</B> Re: [Logwatch-devel] Bind Service &=20
Script</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: =
normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; =
DISPLAY: inline">
<DIV>Dennis,</DIV>
<DIV> </DIV>
<DIV>Isn't the "named" module what you need? It does look through=20
/var/log/messages for the output, not a dedicated bind file, but =
still it is=20
what I see for my DNS server output.</DIV>
<DIV> </DIV>
<DIV>Frank</DIV>
<DIV> </DIV>
<DIV>On Wed, 2018-04-18 at 17:28 +0300, Klaipedaville on Google =
wrote:</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: =
#729fcf 2px solid"=20
type=3D"cite">
<DIV dir=3Dltr>
<DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: =
#000000">
<DIV>Hello everybody, </DIV>
<DIV> </DIV>
<DIV>I can=E2=80=99t believe it that the latest Logwatch 7.4.3 =
still does not have=20
any Bind services and scripts. Am I wrong? I tried to "feed" =
bind9=E2=80=99s=20
regular log files to named but it won=E2=80=99t parse them. Could =
anybody advise,=20
please on how to make Logwatch "report" Bind? The standard / =
regular log=20
files in Bind9 are setup like this:</DIV>
<DIV> </DIV>
<DIV>logging {</DIV>
<DIV>channel bind_log {</DIV>
<DIV>file "/var/log/bind/bind.log" versions 3 size 5m;</DIV>
<DIV>severity info;</DIV>
<DIV>print-category yes;</DIV>
<DIV>print-severity yes;</DIV>
<DIV>print-time yes;</DIV>
<DIV> };</DIV>
<DIV>};</DIV>
<DIV> </DIV>
<DIV>and what the logging produces as the outcome looks like =
this:</DIV>
<DIV> </DIV>
<DIV>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query:=20
ns2.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.961 queries: info: client 1.2.3.4#52132: =
query:=20
a10-66.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#52132: =
query:=20
a9-66.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.962 queries: info: client 1.2.3.4#132: =
query:=20
ns7.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query:=20
ns3.barcap.com IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.963 queries: info: client 1.2.3.4#52132: =
query:=20
a1-71.akam.net IN A + (1.2.3.4)</DIV>
<DIV>18-Apr-2018 11:36:14.964 queries: info: client =
1.12.3.4#52132: query:=20
a12-64.akam.net IN A + (1.2.3.4)</DIV>
<DIV> </DIV>
<DIV>I would be really grateful for any pointers, suggestions,=20
recommendations, assistance.</DIV>
<DIV> </DIV>
<DIV>Many thanks in advance!</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Dennis</DIV>
<DIV>
<DIV=20
style=3D"FONT-SIZE: small; FONT-FAMILY: 'Calibri'; FONT-WEIGHT: =
normal; COLOR: #000000; FONT-STYLE: normal; TEXT-DECORATION: none; =
DISPLAY: =
inline"></DIV> </DIV></DIV></DIV><PRE>------------------------------=
------------------------------------------------</PRE><PRE>Check out the =
vibrant tech community on one of the world's most</PRE><PRE>engaging =
tech sites, Slashdot.org! <A =
href=3D"http://sdm.link/slashdot">http://sdm.link/slashdot</A></PRE><PRE>=
_______________________________________________</PRE><PRE>Logwatch-devel =
mailing list</PRE><PRE><A =
href=3D"mailto:[email protected]">Logwatch-devel@lists=
.sourceforge.net</A></PRE><PRE><A =
href=3D"https://lists.sourceforge.net/lists/listinfo/logwatch-devel">http=
s://lists.sourceforge.net/lists/listinfo/logwatch-devel</A></PRE><PRE><BR=
></PRE></BLOCKQUOTE></DIV></DIV></DIV></BLOCKQUOTE></DIV></DIV></DIV></BL=
OCKQUOTE>
<P>
<HR>
<P>
<HR>
_______________________________________________<BR>Logwatch-devel =
mailing=20
list<BR>[email protected]<BR>https://lists.sourceforge=
.net/lists/listinfo/logwatch-devel<BR></DIV></DIV></DIV></BODY></HTML>
------=_NextPart_000_0057_01D4737D.494FF4B0--
--===============7944531677213123362==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============7944531677213123362==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Logwatch-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/logwatch-devel
--===============7944531677213123362==--