My DNS Problem

[Mark_Andrews at isc.org]

> I've got a DNS related problem that I've been fighting with for about a week
> now.  I can't figure it out, maybe somebody can help.
> 
> Some background.  I run this DNS server on my own machine on my DSL
> connection.  It basically just serves my personal domain.  I'm running
> RedHat 7, Bind version 8.2.2-P5.

	Well I would be upgrading before fixing what ever is the ultimate
	problem.  http://www.isc.org/products/BIND/bind-security.html

> All my local lan clients use it as their
> primary name server.  I used to run this same setup on my cable modem & it
> worked just fine.  Moved a couple of months ago, just got DSL service about
> week/half ago & am trying to get everything set back up.
> 
> Okay.  So here's my problem.  It don't work!  Let's try to be more
> specific...
> 
> DNS server starts up fine, see absolutely *no* errors of any kind in the log
> files;
> Clients on the local LAN have no problem seeing (pinging) outside addresses,
> they have no problem seeing (pinging) all hosts defined in my zone file;
> Using various looking glasses (ie route-server.cerf.net,
> left-coast.net/toolz) I am able to resolve my name server & am able to
> resolve certain A / CNAME records.  Not all of them & no particular ones
> work all the time.  The only address that resolves properly all the time is
> my name server & I assume that's simply because I have a host record set up
> with Network Solutions;
> 
> Now.  About 5 days ago, I chalked all this up to propagation.  Figured I'd
> give it a day or two & all would be fine.  Few days came & went - no change.
> Next thought was that something might be wrong on the registrar's end.
> Checked with Network Solutions & they say all is fine (ie, my account is up
> to date, etc).
> 
> So...  I can't figure out what the problem is.  Maybe it's just a simple
> thing that I've looked over in trying to fight the big things.  At this
> point, maybe somebody else will spot it right away.  If someone out there
> would be willing to research this & help me out, I'd be eternally grateful!
> 
> Here's some pertinent info:
> 
> Master Zone File:
> 
> @ IN SOA ns5.thinktankdecoy.com. root.thinktankdecoy.com. (
>    2001101401 ;
>    8H  ;
>    2H  ;
>    4W  ;
>    1D )  ;
>   NS ns5.thinktankdecoy.com.
>   NS NS2.GRANITECANYON.COM.
>   MX 10 mail.thinktankdecoy.com. ;
> 
> thinktankdecoy.com. A 216.98.67.211
> ns5  A 216.98.67.211
> mail  A 216.98.67.211
> 
> www  CNAME thinktankdecoy.com.
> ftp  CNAME thinktankdecoy.com.
> rem  CNAME thinktankdecoy.com.
> sideous  CNAME thinktankdecoy.com.
> 
> 
> /etc/named.boot file:
> 
> directory                              /var/named
> cache           .                      named.ca
> primary         0.0.127.in-addr.arpa   named.local
> primary  thinktankdecoy.com ttd.com.hosts

	/etc/named.boot is not used by BIND 8.

> 
> /etc/named.conf file:
> 
> options {
>  directory "/var/named";
>  query-source address * port 53;
> };
> 
> zone "." IN {
>  type hint;
>  file "named.ca";
> };
> 
> zone "localhost" IN {
>  type master;
>  file "localhost.zone";
>  allow-update { none; };
> };
> 
> zone "0.0.127.in-addr.arpa" IN {
>  type master;
>  file "named.local";
>  allow-update { none; };
> };
> 
> zone "thinktankdecoy.com" IN {
>  type master;
>  file "ttd.com.hosts";
> };
> 
> 
> TIA for any help!!!

	I'd be looking at your firewall configuration.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org