<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I gave the wrong view if that makes the difference. That was the internal network.<br><br>view "external" {<br> match-clients { any; };<br> recursion no;<br><div><br class="webkit-block-placeholder"></div><div apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div>--myron</div><div>=================================</div><div>Myron Kowalski</div><div>MoCoSIN Network/Systems Administrator</div><div>Moravian College</div><div><a href="mailto:myron@cs.moravian.edu">myron@cs.moravian.edu</a></div><div><br></div></div></div></span><br class="Apple-interchange-newline"> </div><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>From: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">myron <<a href="mailto:kowalskM@cs.moravian.edu">kowalskM@cs.moravian.edu</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Date: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">April 6, 2009 12:00:55 PM EDT</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>To: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica"><a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Subject: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica"><b>ip forwarding DNS 9.6.0</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div> </div><div>I upgraded from 9.2.3.<br><br>I can't seem to do forwarding from a browser.<br><br>Everything works from 9.2.3. When I swap out to 9.6.0, from a command line I<br>can do: nslookup; ping outside the domain; traceroute outside the domain.<br><br>From a web browser I can get out if I use the ip address. However, when I<br>put in a canonical name get an rcode 5.<br><br>There's a barracuda spam firewall in the path. If I take it out, then everything works.<br>There's really nothing to change on the barracuda as far as dns is concerned, other<br>than pointing to a dns server.<br><br>snoop on the wire:<br>9.6.0<br>barracuda -> ns DNS C www22.verizon.com. Internet Addr ?<br> ns -> barracuda DNS R Error: 5(Refused)<br><br>9.2.3<br>barracuda -> ns DNS C www22.verizon.com. Internet Addr ?<br> ns -> barracuda DNS R www22.verizon.com. Internet CNAME www22.verizon.com.edgekey.net.<br><br>I glanced through the archives and found some suggestions about recursions to ip forwarding. I think the<br>conf is set up correctly. At least, it works fine with 9.2.3.<br><br>Here's some of my named.conf edited.<br><br>acl mylab {<br> 10.0.0.0/8;<br>};<br>options {<br> directory "/etc/dns";<br> auth-nxdomain yes;<br>};<br>view "trusted" {<br> match-clients { mylab; };<br> recursion yes;<br> zone "moravian.edu" in {<br> type forward;<br> forwarders { 10.22.5.32; 10.22.5.38; };<br> };<br><br>Any help appreciated.<br><br>--myron<br>=================================<br>Myron Kowalski<br>MoCoSIN Network/Systems Administrator<br>Moravian College<br><a href="mailto:myron@cs.moravian.edu">myron@cs.moravian.edu</a><br><br><br><br>_______________________________________________<br>bind-users mailing list<br>bind-users@lists.isc.org<br>https://lists.isc.org/mailman/listinfo/bind-users<br></div></blockquote></div><br></body></html>