Link to home
Start Free TrialLog in
Avatar of David197705
David197705

asked on

Unrealistic number of zones in rndc status

Hello!

I get 102 zones when I do rndc status. My BIND9 server is only authoritative for 1 zone (that's the site that I host on my LAMP server). I'm aware that it could be an extra ten or so zones, due to the fact that those are in system use or something like that. But it can't be an extra 101 zones. What's going on?
Avatar of arnold
arnold
Flag of United States of America image

Not sure I understand what you are saying. Nor what the underlying issue is.
Run
grep '^zone' named.conf
Look at whether you have an include in named.conf that incorporates other slave/stub zones.

Usually you have the hint zone, reverse DNS zone/s might you gave added reverse DNS zones for all private ips to prevent dos related to source IPs that trigger lookups to the DNS blackhole (see rain revord for private ip space)?
10.in-addr.arpa
16.172.in-addr.aroa
.
.
31.172.im-addr.arpa
168.192.in-addr.arpa?
Avatar of David197705
David197705

ASKER

Thanks for your reply!

There're no issues, just a curiosity of mine. What I'm saying is...When I run the rndc status command in the terminal I get a strangely high number of zones.
How many zones do you have defined in named.conf and in any included files?
have not dealt with it in a while nor have one on hand to test.......

it might be reflecting cached data references..
if you could, do rdnc reload/restart the named process and see whether upon start it reflects a lower amount, then do a lookup for EE and see if the rdnc status count increments based on your lookups. use rndc stats to dump the stats prior to that and see what those stats report..
I was given a hint by someone that those are just built-in empty zones that I could see if I run this command;

rndc dumpdb -zones

I don't quite understand why BIND9 needs them though... What are they for? Should I just leave them alone and I shouldn't worry about those 100 or so zones? Stick to defaults?
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial