I'm just wondering if anyone else is having an issue with an extreme amount of connections to port 53? I just noticed it yesterday and this morning it's worse and seems to be coming from "EVERYWHERE"

Also wondering if anyone has ever tried link logger? This looks like an interesting free package for monitoring.

What is the TTL set at on your zone file? If it's too low, the non-authoritative nameservers will need to ask it for records more frequently.

Does the traffic look legit or does it look like someone's DOSing or trying to exploit the daemon?

Thanks Tommy for the reply, Thought I was out there in the cold for a bit....

My TTL for my nameserver is 0:4:0:0 or 4hrs.

I'm getting a responce back from nslookup that says something weird. Can you tell me if this is right?

I do a nslookup

server domain.com

and I get

default server: domain.com.domain.com "the domain listed twice"

is that correct?

I know that's not correct, I'm just trying to figure out where's my config error.

One of your record lines is missing a period. Can you PM me the zone?