Re: [cobalt-users] Unknown /etc/named/db.127.0.0.1

[flash22@xxxxxxx]

On Fri, 7 Sep 2001, Ted Behling wrote:

> At 04:17 PM 9/1/01, flash22@xxxxxxx wrote:
> >On Sat, 1 Sep 2001, Per M Knutsen wrote:
> >
> > > I have a file in /etc/named with the name db.127.0.0.1 and the following
> > > content:
> > > I've never heard of this domain. What the *%^! is this?
> > > Can I safely delete it?
> >
> >You can , in fact, delete anything in the etc/named directory **except**
> >'records', and the GUI will rebuild them when you save back the changes to
> >that domain in the gui again.....(It never hurts to get in the habit of
> >saving copies of things elsewhere tho, it will save your you-know-what)
> >
> >Are you sure you didn't get hacked or something? you have very strange
> >things on your machine ;)
> 
> That's not correct.  The file in question is for reverse-lookups of the 
> localhost IP address, so if you run 'nslookup 127.0.0.1', it'll return 
> 'localhost'.
> 
> Further, I strongly disagree with your advice to "delete anything" in the 
> /etc/named directory.  I see no evidence that the root zone (db.cache) or 
> localhost reverse-lookup zones would be re-created if deleted, but I'm 
> willing to be convinced otherwise.  Regardless, it's Just Plain Dangerous 
> to go deleting things like that.

Hmm, yes, ok, perhaps a clarification is in order here. *He* can delete
anything there, the advice was not meant for *anyone* in general, he
already toasted his db.cache file, so he has nothing to loose, Other folks
would have to reinstall the nameserver to get a new copy (or download it).

as to the db.127...that file isn't supposed to be there, it's obsolete,
the file is supposed to be in pri.0.0.127... form (however as noted, his
machine got haqqered, i suspect his nameserver got 'downgraded'..

The 127 zone file does get rebuilt by the way, look at the timestamps ;)

The point is, only the records file contains essential user data, and that
file must NOT be removed...

gsh