unable-resolving (Mohammed Ejaz)

[Mohammed Ejaz]

We don't allow others to get query from our dns server, it allows only
permited IP we have ACL enabled to our sunbnet only. 


[root at ns1 named]# dig @ns1.cyberia.net.sa www.jubileegroup.co.uk

; <<>> DiG 9.9.2-P1 <<>> @ns1.cyberia.net.sa www.jubileegroup.co.uk
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47870
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.jubileegroup.co.uk.                IN      A

;; ANSWER SECTION:
www.jubileegroup.co.uk. 604800  IN      A       217.147.177.250

;; AUTHORITY SECTION:
jubileegroup.co.uk.     172800  IN      NS      ns3.jubileegroup.co.uk.
jubileegroup.co.uk.     172800  IN      NS      ns6.jubileegroup.co.uk.

;; ADDITIONAL SECTION:
ns3.jubileegroup.co.uk. 172800  IN      A       217.147.177.250
ns6.jubileegroup.co.uk. 172800  IN      A       81.149.136.94

;; Query time: 231 msec
;; SERVER: 212.119.64.2#53(212.119.64.2)
;; WHEN: Mon Mar  9 15:55:35

-----Original Message-----
From: bind-users-bounces at lists.isc.org
[mailto:bind-users-bounces at lists.isc.org] On Behalf Of G.W. Haywood
Sent: Monday, March 09, 2015 1:41 PM
To: bind-users at lists.isc.org
Subject: RE: unable-resolving (Mohammed Ejaz)

Hi there,

> ... we have been receiving complain from our customer that they are
> unable to open the websites when they use our DNS server ...

Does your server allow your customer to make recursive queries?

~$ dig @ns1.cyberia.net.sa www.jubileegroup.co.uk

; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @ns1.cyberia.net.sa
www.jubileegroup.co.uk
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 25493
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

-- 

73,
Ged.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

--