Problem resolving name.

[Barry Margolin]

In article <cmvokn$1c3v$1 at sf1.isc.org>,
 "Fabiano Silos Reis" <fsilos at ig.com> wrote:

> > I=B4m using bind version 9.3.0 configured as a dns cache server. I=B4m
> > experiencing a strange situation here and I have no idea if it is a
> > bug issue or not. Just wanna some help from you gurus... When I try
> > to resolve www.jfce.gov.br <http://www.jfce.gov.br/>  using this dns
> > server I receive a timeout response. I traced this query using debug
> > level 99. Do anyone have any clue of what I s going on? =20
> > 10-Nov-2004 12:21:34.351 dispatch 0x81f1f38 response 0x821e578
> > 200.166.132.11#53: attached to task 0x81f9f88
> >=20
> > 10-Nov-2004 12:21:34.351 resquery 0x821f3e8 (fctx=20
> > 0x821ad58(www.jfce.gov.br/A)): sent
> 
> > > It has found 200.166.132.11, which is one of the nameservers for =
> jfce.gov.br
> 
> > 10-Nov-2004 12:21:36.351 dispatch 0x81f1f38 response 0x821f6d0 =
> 200.166.132.10#53: attached to task 0x81f9f88
> 
> > > And 200.166.132.10 is the other one, so looks like a problem between
> > > your server and those two.  Can you query them directly, eg
> > >  dig @200.166.132.10 www.jfce.gov.br. a +norec
> > >I can from here.  Ah, but not if I use port 53 as the query-source,
> > > so could be their firewall is refusing queries from port 53.
> 
> Hi Ronan,
> 
> Firewall? Hmm, do you know some tool to make dns request choosing the =
> port for the query-source?

You can put a port number in the query-source option in named.conf.  By 
default, it picks an unused high port.

With dig, you can specify a source port using '-b 
<source-addr>:<source-port>'.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***