xavierzwirtz

include "/etc/bind/rndc.key";
controls {
  inet 127.0.0.1 allow {localhost;} keys {"rndc-key";};
};

acl cachenetworks {  127.0.0.0/24;  ::1/128;  localhost;  192.168.1.0/24;  };
acl badnetworks {  };

options {
  listen-on {  any;  };

xavierzwirtz

include "/etc/bind/rndc.key";
controls {
  inet 127.0.0.1 allow {localhost;} keys {"rndc-key";};
};

acl cachenetworks {  127.0.0.0/24;  };
acl badnetworks {  };

options {
  listen-on {  any;  };

xavierzwirtz

include "/etc/bind/rndc.key";
controls {
  inet 127.0.0.1 allow {localhost;} keys {"rndc-key";};
};

acl cachenetworks {  127.0.0.0/24;  };
acl badnetworks {  };

options {
  listen-on {  any;  };

xavierzwirtz

dig  demoalias.atlas.birddogsw.local 192.168.1.25

; <<>> DiG 9.14.9 <<>> demoalias.atlas.birddogsw.local 192.168.1.25
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26799
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

xavierzwirtz

dig demoalias.atlas.birddogsw.local

; <<>> DiG 9.10.3-P4-Ubuntu <<>> demoalias.atlas.birddogsw.local
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14934
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000

xavierzwirtz

dig demoalias.atlas.birddogsw.local atlas.birddogsw.local

; <<>> DiG 9.14.9 <<>> demoalias.atlas.birddogsw.local atlas.birddogsw.local
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54741
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

xavierzwirtz

[nix-shell:~]$  dig nix-cache.atlas.birddogsw.local atlas.birddogsw.local

; <<>> DiG 9.14.9 <<>> nix-cache.atlas.birddogsw.local atlas.birddogsw.local
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43720
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

xavierzwirtz

; <<>> DiG 9.14.9 <<>> nix-cache.atlas.birddogsw.local 192.168.1.180
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50284
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000

xavierzwirtz

So your system is on fire

First, check the BDTriggerAudit tables record counts:

select @sql
EXEC (@SQL)
GO
--SET ANSI_NULLS ON
--GO

xavierzwirtz

SET ANSI_NULLS ON
GO
SET QUOTED_IDENTIFIER ON
GO
CREATE PROCEDURE [dbo].[bd_purge_audit]
AS   
DECLARE @SQL varchar(max)=''

select @SQL = @SQL + '
SET NOCOUNT ON;