Lookup failures

[Steven Shockley]

On 9/12/2024 9:20 PM, Steven Shockley wrote:
> I'll try to run some tcpdumps inbound and outbound tomorrow, traffic
> should be pretty light.

I did find something interesting that may or may not be related.

The machine is also the Internet gateway.  One NIC has a vlan interface 
for each network; there's also a Cisco switch that routes between 
subnets.  The client-to-bind traffic routes via the Cisco switch, but 
BIND sends the response via the direct vlan interface.

Bad ASCII art:

Query:
client --> (vlan102) --> switch --> (vlan101) --> DNS

Response:
DNS --> (vlan102) --> client

Is there a way to tell BIND to listen (and respond) on a specific 
interface?  I already have listen-on { 10.0.0.1; }; (vlan101 IP) in the 
config with nothing else listening.

I guess there's nothing technically wrong with this, but it does make it 
harder to troubleshoot.