DNS server works but keep getting "host unreachable resolving" error

[Kevin Darcy]

1) Confirm whether you need to forward at all. If you don't need to, 
then remove the forwarders entries and that should take care of the 
errors in your log.
2) If you *must* use forwarders, look at the part of the config that you 
didn't show us, and determine whether there is something there (e.g. 
query-source address and/or port, "server" stanza with an inappropriate 
TSIG key or EDNS buffer size, etc.) that is causing your packets 
destined for 216.171.238.66 to be dropped or rejected, by the target 
server or some intermediate device in between.

- Kevin

Shi Jin wrote:
>> Try
>> dig @216.171.238.66 hp.com
>> to see if the .66 host answers to your queries. Maybe you
>> got a wrong IP 
>> there? Try the same for .67, the other DNS.
>>
>>     
>
> Thank you very much.  I tried what you suggested and it seems that these two servers work perfectly. In fact, I can simply set my DNS to these two servers and have the internet names resolved without any problem. The only reason I run my own DNS server is to resolve the intranet names.
>
>
> ~$ dig @216.171.238.66 hp.com
>
> ; <<>> DiG 9.5.1-P2 <<>> @216.171.238.66 hp.com
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47923
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 6, ADDITIONAL: 6
>
> ;; QUESTION SECTION:
> ;hp.com.				IN	A
>
> ;; ANSWER SECTION:
> hp.com.			574	IN	A	15.216.110.140
> hp.com.			574	IN	A	15.192.45.21
> hp.com.			574	IN	A	15.192.45.22
> hp.com.			574	IN	A	15.192.45.138
> hp.com.			574	IN	A	15.192.45.139
> hp.com.			574	IN	A	15.216.110.21
> hp.com.			574	IN	A	15.200.2.21
> hp.com.			574	IN	A	15.200.30.21
> hp.com.			574	IN	A	15.200.30.22
> hp.com.			574	IN	A	15.200.30.23
> hp.com.			574	IN	A	15.200.30.24
> hp.com.			574	IN	A	15.216.110.22
> hp.com.			574	IN	A	15.216.110.139
>
> ;; AUTHORITY SECTION:
> hp.com.			86374	IN	NS	ns6.hp.com.
> hp.com.			86374	IN	NS	ns3.hp.com.
> hp.com.			86374	IN	NS	ns4.hp.com.
> hp.com.			86374	IN	NS	ns1.hp.com.
> hp.com.			86374	IN	NS	ns5.hp.com.
> hp.com.			86374	IN	NS	ns2.hp.com.
>
> ;; ADDITIONAL SECTION:
> ns6.hp.com.		43600	IN	A	15.195.208.12
> ns1.hp.com.		43600	IN	A	15.219.145.12
> ns2.hp.com.		43600	IN	A	15.219.160.12
> ns3.hp.com.		43600	IN	A	15.203.209.12
> ns4.hp.com.		43600	IN	A	15.203.224.14
> ns5.hp.com.		43600	IN	A	15.195.192.37
>
> ;; Query time: 2 msec
> ;; SERVER: 216.171.238.66#53(216.171.238.66)
> ;; WHEN: Mon Sep 21 14:59:25 2009
> ;; MSG SIZE  rcvd: 436
>
>
> Can you see any problem there?
> Thanks a lot.
>
> Shi
> --
>
>
>
>
>
>       
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
>
>