[Systems] [Systems-logs] Logwatch for sunjammer.sugarlabs.org (Linux)

[Sascha Silbe]

On Mon, Jan 04, 2010 at 06:25:29AM -0500, root at sugarlabs.org wrote:

> Requests with error response codes
>     404 Not Found
[...]
>        /activities/4024/0E97ABAB84F5777767EB74078 ... 00.temp000c.htm: 
> 2 Time(s)
[...]

1. What's going on here, why are there so many 404/500/503s?
2. Can we either get some abbreviated output (i.e. just the number of 
requests with 404 replies) or at least deactivate that listing 
completely? It makes the log summary unreadable.

> **Unmatched Entries**
>     03-Jan-2010 07:14:10.021 security: info: client 84.10.69.137 query 
> (cache) 'ASPMX2.GOOGLEMAIL.COM/A/IN' denied: 1 Time(s)
[...]
AFAICT these are from broken resolvers (they query the sugarlabs.org 
server again for the A record of the MX result instead of traversing the 
.com chain). Can we tell logwatch to ignore them?

>     zone somosazucar.net/IN: refused notify from non-master: 
> 88.149.171.226#44107: 1 Time(s)
The OSUOSL nameservers, though listed by the root servers, don't know 
about this domain, causing lookups to fail with NXDOMAIN (which is 
getting cached so subsequent lookups fail as well) more often than not.

>     zone sugarlabs.org/IN: refused notify from non-master: 
> 83.149.158.214#16405: 1 Time(s)
Misconfiguration? 83.149.158.214 is atlantis.develer.com.

CU Sascha

-- 
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20100104/b983607a/attachment.pgp