FW: v9.2.1 unable to resolve a domain

Mark_Andrews at isc.org Mark_Andrews at isc.org
Wed Aug 14 16:30:54 UTC 2002


> 
> 
> 
> -----Original Message-----
> From: David Botham [mailto:dns at botham.net] 
> Sent: Wednesday, August 14, 2002 10:02 AM
> To: 'bind-users at isc.org'
> Subject: RE: v9.2.1 unable to resolve a domain
> 
> 
> 
> > -----Original Message-----
> > From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
> > Behalf Of Jim Pazarena
> > Sent: Tuesday, August 13, 2002 1:18 PM
> > To: bind-users at isc.org
> > Subject: v9.2.1 unable to resolve a domain
> > 
> > I run a fairly low volume DNS server for my customers, and to my
> knowledge
> > I haven't had a resolving problem to date.
> > 
> > Now I find that my server times out, "no server could be reached".
> > Where other DNS servers *can* resolve this address.
> > 
> >  www.houseoftools.com
> > 
> > Can someone offer a reason why I can't resolve the above?
> 
> Could it be due to the fact that the above is a cname for another cname?
> i.e. chained cnames?

	It has *nothing* to do with CNAMES.

	There is a broken firewall that is stopping the queries getting
	to the server or the replies getting back.   You can see this
	by setting different port values on "query-source".

	1024 fails, 1025 succeeds (this was the case yesterday when I
	checked).  Depending upon what you have running the OS may assign
	1024 to named's query socket.

	Mark


> 
> [root at nsca1 root]# dig www.houseoftools.com
> 
> ; <<>> DiG 8.3 <<>> www.houseoftools.com 
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 6, ADDITIONAL: 6
> ;; QUERY SECTION:
> ;;      www.houseoftools.com, type = A, class = IN
> 
> ;; ANSWER SECTION:
> www.houseoftools.com.   1h59m56s IN CNAME  secure.mbasemarket.com.
> secure.mbasemarket.com.  30M IN CNAME  kokomos.mbase.com.
> kokomos.mbase.com.      4H IN A         139.142.191.68
> 
> ;; AUTHORITY SECTION:
> mbase.com.              1D IN NS        remote2.easydns.com.
> mbase.com.              1D IN NS        ns1.mbase.com.
> mbase.com.              1D IN NS        ns1.easydns.com.
> mbase.com.              1D IN NS        ns2.mbase.com.
> mbase.com.              1D IN NS        ns2.easydns.com.
> mbase.com.              1D IN NS        remote1.easydns.com.
> 
> ;; ADDITIONAL SECTION:
> remote2.easydns.com.    1d23h59m56s IN A  212.100.224.80
> ns1.mbase.com.          1d23h59m56s IN A  139.142.191.96
> ns1.easydns.com.        1d23h59m56s IN A  216.220.40.243
> ns2.mbase.com.          1d23h59m56s IN A  139.142.191.66
> ns2.easydns.com.        1d23h59m56s IN A  216.220.40.244
> remote1.easydns.com.    1d23h59m56s IN A  64.39.29.212
> 
> ;; Total query time: 3776 msec
> ;; FROM: nsca1 to SERVER: default -- 216.154.198.178
> ;; WHEN: Thu Jan  2 16:04:27 2003
> ;; MSG SIZE  sent: 38  rcvd: 355
> 
> > 
> > I can dig & nslookup any other domain name immagineable except the
> above.
> > --
> > Jim Pazarena     mailto:paz at ccstores.com
> > 
> > 
> 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list