[Systems] [Systems-logs] Logwatch for sunjammer.sugarlabs.org (Linux)

[Bernie Innocenti]

On Mon, 2010-01-04 at 13:15 +0100, Sascha Silbe wrote:
> On Mon, Jan 04, 2010 at 06:25:29AM -0500, root at sugarlabs.org wrote:
> 
> > Requests with error response codes
> >     404 Not Found
> [...]
> >        /activities/4024/0E97ABAB84F5777767EB74078 ...
> 00.temp000c.htm: 
> > 2 Time(s)
> [...]
> 
> 1. What's going on here, why are there so many 404/500/503s?
> 2. Can we either get some abbreviated output (i.e. just the number of 
> requests with 404 replies) or at least deactivate that listing 
> completely? It makes the log summary unreadable.

Hmm I'm not sure how to answer both questions... Can you please
investigate?



> > **Unmatched Entries**
> >     03-Jan-2010 07:14:10.021 security: info: client 84.10.69.137
> query 
> > (cache) 'ASPMX2.GOOGLEMAIL.COM/A/IN' denied: 1 Time(s)
> [...]
> AFAICT these are from broken resolvers (they query the sugarlabs.org 
> server again for the A record of the MX result instead of traversing
> the 
> .com chain). Can we tell logwatch to ignore them?
> 
> >     zone somosazucar.net/IN: refused notify from non-master: 
> > 88.149.171.226#44107: 1 Time(s)
> The OSUOSL nameservers, though listed by the root servers, don't know 
> about this domain, causing lookups to fail with NXDOMAIN (which is 
> getting cached so subsequent lookups fail as well) more often than
> not.

I asked ramereth on #osuosl to add somosazucar.net.


> >     zone sugarlabs.org/IN: refused notify from non-master: 
> > 83.149.158.214#16405: 1 Time(s)
> Misconfiguration? 83.149.158.214 is atlantis.develer.com.

atlantis.develer.com (ns2.develer.com) is acting as a slave, but I took
it off the zone file because we had too many records for @ so that we
were exceeding the 512byte response limit for DNS queries.

It's a long story, but you know the details. I'd say: let's ignore the
warnings until we'll be finished cleaning up the nameservers (see my
other post to systems@).

-- 
   // Bernie Innocenti - http://codewiz.org/
 \X/  Sugar Labs       - http://sugarlabs.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.sugarlabs.org/private/systems/attachments/20100108/edf74725/attachment.pgp