[c-nsp] Cisco 1811 DNS Server overload

[Skeeve Stevens]

Dns spoofing is not on.

Just in case I 'ip dns spoofing' and clear host *
And it is still filling up with host entries.

...Skeeve

-----Original Message-----
From: Brian Turnbow [mailto:b.turnbow at twt.it] 
Sent: Monday, 16 April 2007 11:53 PM
To: skeeve at skeeve.org; Cisco-nsp
Subject: RE: [c-nsp] Cisco 1811 DNS Server overload

Do you have dns spoofing on ? If so turn it off. That is what causes "dns
proxy" 
You can disable dns lookups completly with 
no ip domain lookup 
 
Brian

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Skeeve Stevens
Sent: lunedì 16 aprile 2007 15.07
To: 'Cisco-nsp'
Subject: [c-nsp] Cisco 1811 DNS Server overload


I have an 1811 temporarily doing NAT for about 200 clients and at the moment
and while it generally is working ok, the DNS facility of the router is
freaking out.

Some show logging:

*Apr 16 11:55:53.425: %SYS-3-CPUHOG: Task is running for (2000)msecs, more
than (2000)msecs (13/0),process = DNS Server.
-Traceback= 0x8099C694 0x80AB26B0 0x80AB5DB0 0x80AB6834 0x80AB7ACC
0x800D7ACC 0x800DB410 
*Apr 16 11:59:59.721: %SYS-3-CPUHOG: Task is running for (2000)msecs, more
than (2000)msecs (30/0),process = DNS Server.
-Traceback= 0x822F21DC 0x8099C78C 0x80AB6508 0x80AB7ACC 0x800D7ACC
0x800DB410

And yesterday it crashed:

Router uptime is 1 day, 2 hours, 42 minutes
System returned to ROM by error - an Illegal Opcode exception, PC 0x83B1A8E4
at 20:17:29 AEST Sun Apr 15 2007

I would like to actually stop the 1811 caching DNS queries but I can't
figure out how to.  I would just prefer it relay every request or some other
solutions perhaps that could be suggested here. This would at least keep the
router up and running.

Any help would be muchly appreciated.

.Skeeve


_______________________________________________________
Skeeve Stevens, RHCE     Email: skeeve at skeeve.org
Website: www.skeeve.org  - Telephone: (0414) 753 383
skype://skeeve
Address: P.O Box 1035, Epping, NSW, 1710, Australia

eIntellego - skeeve at eintellego.net - www.eintellego.net
_______________________________________________________
I'm a groove licked love child king of the verse
Si vis pacem, para bellum



_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/