[syslog-ng]syslog-ng stopped working yesterday
Balazs Scheidler
syslog-ng@lists.balabit.hu
Thu, 30 Dec 2004 18:36:28 +0100
On Wed, 2004-12-29 at 09:30 +0100, Gorm J. Siiger wrote:
> >
> > syslog-ng probably blocks on something, maybe on a DNS query. can you
> > strace syslog-ng while it is blocked like this?
> >
>
> I found the problem, the reverse dns zone for one particular host was
> classless delegated, and that name-server was configured wrong.
>
> Pretty interesting that syslog-ng fails that bad when dns doesn't work.
>
> Once the problem was fixed everything went back to normal.
>
>
you can always disable resolving names from DNS, but what else could you
do? if I'd do non-blocking DNS queries and would continue processing on
other messages while waiting for a given message to resolve, then
message ordering will be bad.
An other solution might be to add non-DNS name lookups, e.g. resolve
names from a private mechanism to make it possible to use names in
messages and use IP addresses if it fails, but never block.
What do you think about this solution?
--
Bazsi