<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>OK, I've been trying my hardest to figure this out.<br>
<br>
I have BIND9 installed and set up as a slave to one of our Domain Controllers
(so we can at least still get DNS if it were to go down). It works fine for
transferring the zone file of our domain down, and from the server running BIND
I can resolve hostnames of our local network machines along with outside names
such as google.com (using nslookup, yeah I know it sucks).<br>
<br>
However, when I set up one of my Windows XP clients to use the new server for
DNS, it can resolve local machine names fine when I run nslookup against it,
but it gives me "Query refused" when trying to resolve an outside DNS
name.<br>
<br>
I ran nslookup against the ISP's DNS IP's and can resolve the outside hostnames
just fine, but for some reason I can't resolve them against the new DNS server.<br>
<br>
I have not made any modifications to /etc/bind/named.conf. Instead, I have put
my configurations in /etc/bind/named.conf.local (since that is what the
named.conf file says to do).<br>
<br>
Here is my /etc/bind/named.conf.local file (protected of course):<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Code:<o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:inset 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt'><pre
style='border:none;padding:0in;overflow:auto'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>zone "OURDOMAIN.COM" {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> type slave;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> masters {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 192.168.1.22;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 192.168.1.23;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> file "OURDOMAIN.COM.db";<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> allow-transfer {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> any;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> allow-query {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> any;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>};<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'><o:p> </o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>zone "192.168.in-addr.arpa" {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> type slave;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> masters {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 192.168.1.22;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 192.168.1.23;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> file "192.168.in-addr.arpa.db";<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> allow-transfer {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> any;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> allow-query {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> any;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>};<o:p></o:p></span></font></pre></div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>And my
/etc/bind/named.conf.options:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Code:<o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:inset 1.0pt;padding:5.0pt 5.0pt 5.0pt 5.0pt'><pre
style='border:none;padding:0in;overflow:auto'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>options {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> directory "/var/cache/bind";<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'><o:p> </o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> forwarders {<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 216.12.0.20;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> 216.12.48.23;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'><o:p> </o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> auth-nxdomain no;<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'> listen-on-v6 { any; };<o:p></o:p></span></font></pre><pre
style='border:none;padding:0in'><font size=2 face="Courier New"><span
style='font-size:10.0pt'>};<o:p></o:p></span></font></pre></div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Again, this only seems to affect outside clients, I can run queries on
nslookup just fine on the DNS server itself.<br>
<br>
Any help would be greatly appreciated.</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Kenny<o:p></o:p></span></font></p>
</div>
</body>
</html>