can't-resolve

[Ejaz]

When  run "dig a yahoo.com @212.119.64.228 below is the ouput. 



yahoo.com. (38)
17:39:41.363532 IP 212.119.64.228.37891 > 212.119.64.228.domain: 34168+
[1au] A?                           yahoo.com. (38)
17:39:42.246993 IP 212.119.64.228.53702 > 192.5.5.241.domain: 58238 [1au] A?
yah                          oo.com. (38)
17:39:42.247012 IP 212.119.64.228.45701 > 192.5.5.241.domain: 13223 [1au]
NS? .                           (28)
17:39:43.047148 IP 212.119.64.228.43795 > 128.63.2.53.domain: 1539 A?
yahoo.com.                           (27)
17:39:43.047154 IP 212.119.64.228.55178 > 128.63.2.53.domain: 56002 NS? .
(17)
17:39:43.847447 IP 212.119.64.228.61664 > 192.58.128.30.domain: 165 A?
yahoo.com                          . (27)
17:39:43.847542 IP 212.119.64.228.30239 > 192.58.128.30.domain: 11435 NS? .
(17)
17:39:44.995096 IP 212.119.64.228.24477 > 199.7.83.42.domain: 25645 [1au] A?
yahoo.com. (38)
17:39:44.995162 IP 212.119.64.228.22170 > 199.7.83.42.domain: 44767 [1au]
NS? . (28)
17:39:45.897226 IP 212.119.64.228.35574 > 199.7.91.13.domain: 29284 A?
yahoo.com. (27)
17:39:45.897233 IP 212.119.64.228.36946 > 199.7.91.13.domain: 17626 NS? .
(17)
17:39:46.363642 IP 212.119.64.228.37891 > 212.119.64.228.domain: 34168+
[1au] A? yahoo.com. (38)
17:39:46.370282 IP 212.119.64.228.domain > 212.119.64.228.37891: 34168
ServFail 0/0/1 (38)


Yes, ns2.cyberia.net.sa (it is live server) is our name server. But I don't
have any problem on this server when I use as resolver or autherative DNS.

Regards,
Mohammed Ejaz
CYBERIAR SAUDI ARABIA
P.O.Box 301079, Riyadh 11372, Saudi Arabia
Tel: +966 11 464 7114 Ext. 140
Fax: +966 11 465 4735

-----Original Message-----
From: bind-users-bounces at lists.isc.org
[mailto:bind-users-bounces at lists.isc.org] On Behalf Of Matus UHLAR -
fantomas
Sent: Friday, December 26, 2014 6:46 PM
To: bind-users at lists.isc.org
Subject: Re: can't-resolve

>On 25.12.14 17:50, Mohammed Ejaz wrote:
>>as you said I modified the logging sections.  but still external 
>>domains are unable to resolve.  I wanted tell you one more thing when 
>>I reassign my old IP which is 212.119.64.12 then everything works fine 
>>(I mean interal autherative domain and external yahoo etc....  
>>)without any problem
>
>does it work when you ask any of those IPs for the data?
>
>please run "dig a yahoo.com @212.119.64.228"

On 25.12.14 23:43, Ejaz wrote:
>Query log says "Connection timed out error."

so, isn't the named able to run outgoing DNS queries?
That really sounds like a firewall, no metter if on your machine or on
external IP.

did you run
"tcpdump -i any -n -p port 53"
on your nameserver to see if packets come out and if answers return?

>>        listen-on port 53 { 212.119.64.228; 212.119.64.226; 
>> 212.119.64.12;};

when looking up makksab.com, it directs us to:

makksab.com.            172800  IN      NS      ns2.cyberia.net.sa.

ns2.cyberia.net.sa.     600     IN      A       212.119.64.3

is this any of your nameservers?

when I query your IPS above, 212.119.64.12 does not answer, the others do.

--
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

--