Found this in log/messages whats this all about?


Dec 8 14:09:13 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:13 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:13 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:13 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:13 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:16 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:17 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:19 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.241#35170: no more recursive clients: quota reached
Dec 8 14:09:20 valley named[921]: client 209.197.254.242#35170: no more recursive clients: quota reached


Kinda keeps going on and on to, whats it doing ?

Google says it's related to recursive-clients:

recursive-clients number;

Performance parameters. Defines the number of simultaneous recursive lookups the server will perform on behalf of its clients. BIND 9 default is 1000 i.e. it will support 1000 simultaneous recursive lookup requests - should be enough! This option may only be specified in a 'global' options statement.

http://newweb.zytrax.com/books/dns/ch7/queries.html


Looks like someone is using your server for their DNS server to resolve any domain names not jusr yours, and not just one person but many. Maybe you want this, maybe not.

o_0 Oh yea makes sense thanks :)

Examining your logs... named it seems like BIND simply stops resolving hostnames. This may be due to negative caching. Try playing with max-ncache-ttl setting.

I would also turn off recursive queries going to your external DNS server(s). Those servers should only resolve domains that they serve and /dev/null anything else that comes to them.

In addition, I suggest using djdbns and dump BIND. Then setup DNS caches internally and point your machine to them. DJBDNS has a perfect security record and is also a lot more robust.

Check the following link for more information on djbdns:

http://cr.yp.to/djbdns.html

That would explain email and cpanel failures at random