10.15 Do not resolve hosts on logging valves

Information

Setting enableLookups to true on Connector will result in a DNS look-ups to obtain the host name of the remote client before logging any information. This uses additional resources when logging.

Rationale:

Allowing enableLookups adds additional overhead to resolve the host name of a remote client which is rarely needed.

Solution

In Connector elements, set the enableLookups attribute to false or remove it.

<Connector ... enableLookups='false' />

Default Value:

By default, DNS lookups are disabled.

See Also

https://workbench.cisecurity.org/benchmarks/11652

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-8, CSCv7|5.1

Plugin: Unix

Control ID: 6328097fc2dcb4730e3091322a8e94264199411a664fc3be856b4d3a2203b6db