Reverse lookups failing

[Davenport, Steve M]

Trying update again, text was missing:
 
Please disregard, this is working now. Was either an ASA DNS filter
(turned off and on again during testing) or setting both servers to run
bind9.3.5-P2.
 

________________________________

From: bind-users-bounces at lists.isc.org
[mailto:bind-users-bounces at lists.isc.org] On Behalf Of Davenport, Steve
M
Sent: Monday, November 17, 2008 8:20 PM
To: comp-protocols-dns-bind at isc.org
Subject: Reverse lookups failing


Hello,
 
I am having issues with reverse lookups failing and can not find the
cause. Running bind 9.3.5-P1 and 9.3.6rc1.
On an external server dig gives:
 
$ dig @harley.mc.utmck.edu -x 165.6.6.27
; <<>> DiG 9.5.0-P1 <<>> @harley.mc.utmck.edu -x 165.6.6.27
; (1 server found)
;; global options:  printcmd
;; connection timed out; no servers could be reached

 
Internally the same query is fine:
$ dig @harley.mc.utmck.edu -x 165.6.6.27
; <<>> DiG 9.2.4 <<>> @harley.mc.utmck.edu -x 165.6.6.27
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1952
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;27.6.6.165.in-addr.arpa.       IN      PTR
;; ANSWER SECTION:
27.6.6.165.in-addr.arpa. 21600  IN      PTR     ns-2.hosp.utmck.edu.
;; AUTHORITY SECTION:
6.165.in-addr.arpa.     21600   IN      NS      ns-2.hosp.utmck.edu.
6.165.in-addr.arpa.     21600   IN      NS      harley.mc.utmck.edu.
;; ADDITIONAL SECTION:
ns-2.hosp.utmck.edu.    21600   IN      A       165.6.6.27
harley.mc.utmck.edu.    21600   IN      A       165.6.131.32
;; Query time: 18 msec
;; SERVER: 165.6.131.32#53(harley.mc.utmck.edu)
;; WHEN: Mon Nov 17 19:50:49 2008
;; MSG SIZE  rcvd: 144

The config file has "allow query" set on the reverse zone. This was
working earlier and I'm told there have been no network changes.
 
Does this appear to be a firewall issue? Is there anything else that
might help narrow down the problem?
 
Thanks for your assistance,
Steve

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20081118/bc29b74f/attachment.html>