BIND9 fails resolving after connecting to VPN

[Chuck Swiger]

On Apr 8, 2011, at 2:23 PM, kapetr wrote:
>> What does:
>> 
>> dig +short rs.dns-oarc.net txt
>> 
>> ...do when your VPN tunnel is up?
> 
> After VPN up and restart of BIND:
> 
> hugo at duron650:~$ dig +short rs.dns-oarc.net txt
> ;; connection timed out; no servers could be reached
> hugo at duron650:~$ 

Hmm.  Your local nameservers probably are listed in /etc/resolv.conf, otherwise consider adding @localhost or whatever is needed to talk to them.  Something is blocking DNS traffic going via your tunnel, presumably.

tcpdump and traceroute might help diagnose.  Or try switching to hitting 4.2.2.2 or some other well-known public nameserver via dig, and see whether you can get a response from them.

Regards,
-- 
-Chuck