syslog filling up with "no addrs found for root NS"

[shri shrikumar <shri@kraya.co.uk>]

Hi List,

I just experienced a pseudo denial of service issue. A server of ours 
runs woody and bind seems to have filled syslog and daemon.log with 
about 1.3g worth of messages along the lines of

Apr 18 18:25:38 server named[241]: sysquery: no addrs found for root NS 
(A.ROOT-SERVERS.NET)
Apr 18 18:25:38 server named[241]: sysquery: no addrs found for root NS 
(B.ROOT-SERVERS.NET)
Apr 18 18:25:38 server named[241]: sysquery: no addrs found for root NS 
(C.ROOT-SERVERS.NET)

This in itself was not much of issue except that logcheck started to eat 
up all the memory and the kernel starts to kill processes.

What I have done is to recreate syslog and daemon.log with the above 
lines stripped out with grep and restarted the the logging daemons. 
However, I would like to know how to prevent something like this from 
happening in the future.

Any help / pointers in this matter will be appreciated.

Thanks and best wishes,

Shri