syslog shows "network unreachable resolving..." every hour

Discussion in 'General' started by Spawnsworth, Nov 21, 2018.

  1. Spawnsworth

    Spawnsworth Member

    Hi,

    One of our web servers (running ISP Config 3.1.13) has had apache crash on it a couple of times in the last 3 days. So far I'm not sure if I've found the culprit but just trying to clear up any general weirdness. I see the below error in my syslog every hour bur I don't know how or what is calling these IPv6 addresses. Is the simplest option just to turn off IPv6 or is there something more sinister?

    Also, how do you turn off IPv6? I have copied example logs below. Thanks!

    spawnsworth

    Nov 21 11:27:11 myserver named[1230]: network unreachable resolving 'ns1.isc.ultradns.net/AAAA/IN': 2610:a1:1016::e8#53
    Nov 21 11:27:11 myserver named[1230]: network unreachable resolving 'ns2.isc.ultradns.net/A/IN': 2610:a1:1015::e8#53
    Nov 21 11:27:12 myserver named[1230]: network unreachable resolving 'ari.alpha.aridns.net.au/AAAA/IN': 2a01:8840:bf::1#53
    Nov 21 11:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/AAAA/IN': 2a01:8840:bf::1#53
    Nov 21 11:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/AAAA/IN': 2a01:8840:c0::1#53
    Nov 21 11:27:12 myserver named[1230]: network unreachable resolving 'ari.alpha.aridns.net.au/AAAA/IN': 2a01:8840:c0::1#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'dlv.isc.org/DNSKEY/IN': 2001:4f8:0:2::19#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns.isc.afilias-nst.info/A/IN': 2a01:8840:9::1#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::30#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2a01:8840:9::1#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns1.isc.ultradns.net/A/IN': 2610:a1:1017::e8#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns1.isc.ultradns.net/AAAA/IN': 2610:a1:1017::e8#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/A/IN': 2a01:8840:bf::1#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns2.isc.ultradns.net/A/IN': 2610:a1:1017::e8#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/AAAA/IN': 2a01:8840:bf::1#53
    Nov 21 12:27:12 myserver named[1230]: network unreachable resolving 'ns2.isc.ultradns.net/AAAA/IN': 2610:a1:1017::e8#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'dlv.isc.org/DNSKEY/IN': 2001:500:60::29#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'ari.alpha.aridns.net.au/A/IN': 2407:6e00:253:306::73#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/A/IN': 2407:6e00:253:306::73#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/AAAA/IN': 2407:6e00:253:306::73#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'ari.alpha.aridns.net.au/AAAA/IN': 2407:6e00:253:306::73#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'dlv.isc.org/DLV/IN': 2001:502:ad09::23#53
    Nov 21 13:27:12 myserver named[1230]: network unreachable resolving 'ari.beta.aridns.net.au/A/IN': 2001:dcd:2::2#53
    Nov 21 13:27:13 myserver named[1230]: network unreachable resolving 'ari.delta.aridns.net.au/AAAA/IN': 2001:dcd:4::2#53
    Nov 21 13:27:13 myserver named[1230]: network unreachable resolving 'ari.delta.aridns.net.au/AAAA/IN': 2001:dcd:1::2#53
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    It is bind. To get rid of them, disable ipv6 from name service.
     
  3. Spawnsworth

    Spawnsworth Member

  4. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Bind uses also IPv6 by default. If you host does not have IPv6 connectivity, those calls fail and show up in log.
    Did the error messages in log stop now? That instruction you linked to seems to disable IPv6 in the host, not just in bind.
    Another way to solve this is adding IPv6 connectivity to the host, then it can access those now failing resources.
     

Share This Page