blob: b3ed40ee59e3c42324cbdd52f6ef92ead80e761b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
.. SPDX-License-Identifier: GPL-3.0-or-later
.. _mod-bogus_log:
DNSSEC validation failure logging
=================================
This module adds error message for each DNSSEC validation failure.
It is meant to provide hint to operators which queries should be
investigated using diagnostic tools like DNSViz_.
Add following line to your configuration file to enable it:
.. code-block:: lua
modules.load('bogus_log')
Example of error message logged by this module:
.. code-block:: none
DNSSEC validation failure dnssec-failed.org. DNSKEY
.. _DNSViz: http://dnsviz.net/
List of most frequent queries which fail as DNSSEC bogus can be obtained at run-time:
.. code-block:: lua
> bogus_log.frequent()
[1] => {
[type] => DNSKEY
[count] => 1
[name] => dnssec-failed.org.
}
[2] => {
[type] => DNSKEY
[count] => 13
[name] => rhybar.cz.
}
Please note that in future this module might be replaced
with some other way to log this information.
|
