Re[3]: [suse-security] NSCD

Hi,

N> I hope to hell that you don't log DNS names in you web server logs!!??!! N> FYI, you should NEVER log dns names for anything. It slows you server N> down to the speed of DNS replies, which is most definately a "bad idea" (tm)

Hmm, I suppose you've got a point - but FQDNs are sure helpful in determining whence visitors came.

You ought to take it one stage further and *never* log names (FQN or host) always IP Address. Your dns may be compromised while you are trying to log.

And AFAIK only expensive log analysers (e.g. WebTrends) resolve IPs while analysing logs.

This is the proper way to do it and it should be analysed on a safe host away from the live environment. John