v9.2.1 unable to resolve a domain

[Mark_Andrews at isc.org]

> I run a fairly low volume DNS server for my customers, and to my knowledge
> I haven't had a resolving problem to date.
> 
> Now I find that my server times out, "no server could be reached".
> Where other DNS servers *can* resolve this address.
> 
>  www.houseoftools.com
> 
> Can someone offer a reason why I can't resolve the above?
> 
> I can dig & nslookup any other domain name immagineable except the above.
> --
> Jim Pazarena     mailto:paz at ccstores.com
> 
> 
> 
> 

	Yes.  They have a broken firewall configuration which is stopping
	packets from port 1024 (and maybe lower) from being answered.

	Mark

04:10:29.441071 204.152.189.16.1024 > 139.142.191.96.53:  36390 A? www.houseoftools.com. (38)
04:10:45.451260 204.152.189.16.1024 > 139.142.191.66.53:  9165 A? www.houseoftools.com. (38)
04:11:01.461559 204.152.189.16.1024 > 139.142.191.96.53:  65401 A? www.houseoftools.com. (38)
04:11:31.471940 204.152.189.16.1024 > 139.142.191.66.53:  1058 A? www.houseoftools.com. (38)
04:11:31.759530 204.152.189.16.2330 > 139.142.191.96.53:  4+ SOA? houseoftools.com. (34)
04:11:31.844266 139.142.191.96.53 > 204.152.189.16.2330:  4* 1/2/2 SOA[|domain] (DF)

--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org