<br><br><div class="gmail_quote">On Sat, May 2, 2009 at 9:39 PM, Jonathan Petersson <span dir="ltr"><<a href="mailto:jpetersson@garnser.se">jpetersson@garnser.se</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Could you please provide a copy of your config, I'm guessing that you<br>
have a general forwarder in place or haven't turned on recursion.</blockquote><div><br>The options and the forward zone are as follows:<br>acl internal {<br> <a href="http://127.0.0.1/8">127.0.0.1/8</a>;<br> <a href="http://192.168.9.0/24">192.168.9.0/24</a>;<br>
}<br>options {<br> directory "/etc/namedb";<br> pid-file "/var/run/named.pid";<br> statistics-file "/var/run/named.stats";<br><br> forwarders {<br> x.x.x.x; (ISP DNS server)<br>
x.x.x.x; (ISP DNS server)<br> };<br> forward first;<br> max-transfer-time-in 120;<br> max-transfer-time-out 120;<br> transfer-format many-answers;<br>};<br> zone "mylan.loc" {<br>
type forward;<br> forwarders {<br> 192.168.90.254;<br> };<br>};<br>zone "<a href="http://anothernet.no-ip.org">anothernet.no-ip.org</a>" {<br> type master;<br> file "<a href="http://anothernet.no-ip.org">anothernet.no-ip.org</a>";<br>
<br> allow-query {<br> internal;<br> };<br> <br> allow-transfer {<br> none;<br> };<br> <br> allow-update {<br> none;<br> };<br>
};<br>zone "9.168.192.IN-ADDR.ARPA" {<br> type master;<br> file "another.no-ip.org.rev";<br> <br> allow-query {<br> internal;<br> };<br> <br> allow-transfer {<br>
none;<br> };<br> <br> allow-update {<br> none;<br> };<br>};<br>..."<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>
<br>
/Jonathan<br>
<div><div></div><div class="h5"><br>
On Sat, May 2, 2009 at 8:06 AM, Nelson Vale <<a href="mailto:nelsonduvall@gmail.com">nelsonduvall@gmail.com</a>> wrote:<br>
> Hi all,<br>
><br>
><br>
> I've been facing a problem in my private network which I was not able to fix<br>
> yet.<br>
><br>
> In my gateway (linux debian alike) I have bind 9.5 installed and running,<br>
> and I have one IPSec tunnel to another gateway over the internet. It also<br>
> has configured a forward zone with the name server being the other gateway<br>
> internal address (accessibly through the IPSec tunnel only).<br>
><br>
> Recently the other IPSec endpoint was shutdown and, of course, my queries to<br>
> the forward domain started failling. Nothing strange here...<br>
><br>
> The real problem is that I suddendly were not able to resolve any other DNS<br>
> queries, like <a href="http://www.google.com" target="_blank">www.google.com</a>, from inside my network:<br>
><br>
> "host <a href="http://www.google.com" target="_blank">www.google.com</a><br>
> ;; connection timed out; no servers could be reached"<br>
><br>
> I took a look at the named daemon and I see that it does not respond to<br>
> anything as long as the IPSec tunnel is down, but only if it's the other<br>
> endpoint that is down. I've tried stopping my endpoint and this problem do<br>
> not occur as long as I restart named. I think this happens because as long<br>
> as my endpoint is up the routes to the other endpoint are set, and named<br>
> trys to querie the forward domain name server. The problem is that the<br>
> queries do not timeout and named hangs there:<br>
><br>
> The configuration I have is:<br>
><br>
> Bind: BIND 9.5.0-P2<br>
> IP Address (private): 192.168.9.254<br>
> Forwarders: ADSL provider (2 forwarders)<br>
> Forward Zone: mylan.loc<br>
> Name Server:192.168.90.254<br>
><br>
><br>
> After it starts if I try to querie one of the forward zone record<br>
> (box.mylan.loc) it displays:<br>
><br>
> "...<br>
> 02-May-2009 14:22:21.843 socket 0xb7bd5548: dispatch_recv: event 0xb7be3d28<br>
> -> task 0xb7b74d18<br>
> 02-May-2009 14:22:21.844 socket 0xb7bd5548: internal_recv: task 0xb7b74d18<br>
> got event 0xb7bd559c<br>
> 02-May-2009 14:22:21.844 socket 0xb7bd5548 192.168.9.2#47869: packet<br>
> received correctly<br>
> 02-May-2009 14:22:21.844 socket 0xb7bd5548: processing cmsg 0xb7bb2120<br>
> 02-May-2009 14:22:21.844 client 192.168.9.2#47869: UDP request<br>
> 02-May-2009 14:22:21.844 client 192.168.9.2#47869: using view '_default'<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: request is not signed<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: recursion available<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: query<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: ns_client_attach: ref = 1<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: query (cache)<br>
> 'box.mylan.loc/A/IN' approved<br>
> 02-May-2009 14:22:21.845 client 192.168.9.2#47869: replace<br>
> 02-May-2009 14:22:21.845 clientmgr @0xb7baa608: createclients<br>
> 02-May-2009 14:22:21.846 clientmgr @0xb7baa608: recycle<br>
> 02-May-2009 14:22:21.846 createfetch: box.mylan.loc A<br>
> 02-May-2009 14:22:21.846 fctx 0xb7bae408(box.mylan.loc/A'): create<br>
> 02-May-2009 14:22:21.846 fctx 0xb7bae408(box.mylan.loc/A'): join<br>
> 02-May-2009 14:22:21.846 fetch 0xb7bb4148 (fctx<br>
> 0xb7bae408(box.mylan.loc/A)): created<br>
> 02-May-2009 14:22:21.846 client @0xb7bda008: udprecv<br>
> 02-May-2009 14:22:21.846 socket 0xb7bd5548: socket_recv: event 0xb7bd4b48 -><br>
> task 0xb7bb1690<br>
> 02-May-2009 14:22:21.847 fctx 0xb7bae408(box.mylan.loc/A'): start<br>
> 02-May-2009 14:22:21.847 fctx 0xb7bae408(box.mylan.loc/A'): try<br>
> 02-May-2009 14:22:21.847 fctx 0xb7bae408(box.mylan.loc/A'): cancelqueries<br>
> 02-May-2009 14:22:21.847 fctx 0xb7bae408(box.mylan.loc/A'): getaddresses<br>
> 02-May-2009 14:22:21.847 findaddrinfo: new entry 0xb7aec4a0<br>
> 02-May-2009 14:22:21.847 fctx 0xb7bae408(box.mylan.loc/A'): query<br>
> 02-May-2009 14:22:21.848 socket 0xb7b79938: created<br>
> 02-May-2009 14:22:21.848 socket 0xb7b79938 0.0.0.0#43841: bound<br>
> 02-May-2009 14:22:21.848 dispatchmgr 0xb7bbb168: created UDP dispatcher<br>
> 0xb7b6d378<br>
> 02-May-2009 14:22:21.848 dispatch 0xb7b6d378: created task 0xb7b74d70<br>
> 02-May-2009 14:22:21.848 dispatch 0xb7b6d378: created socket 0xb7b79938<br>
> 02-May-2009 14:22:21.848 resquery 0xb7b80008 (fctx<br>
> 0xb7bae408(box.mylan.loc/A)): send<br>
> 02-May-2009 14:22:21.849 dispatch 0xb7b6d378 response 0xb7ba7848<br>
> 192.168.90.254#53: attached to task 0xb7b6f2c8<br>
> 02-May-2009 14:22:21.849 socket 0xb7b79938: socket_recv: event 0xb7b81698 -><br>
> task 0xb7b74d70<br>
><br>
><br>
> and it hangs here forever. Even if I restart the named server it does not<br>
> respond to any of my queries. If I stop the named server with Ctrl + C it<br>
> displays:<br>
><br>
> "...<br>
> ^C02-May-2009 14:23:46.773 socket.c:1226: unexpected error:<br>
> 02-May-2009 14:23:46.773 internal_send: 192.168.90.254#53: Interrupted<br>
> system call should be restarted<br>
> 02-May-2009 14:23:46.774 errno2result.c:111: unexpected error:<br>
> 02-May-2009 14:23:46.774 unable to convert errno to isc_result: 85:<br>
> Interrupted system call should be restarted<br>
> 02-May-2009 14:23:46.774 resquery 0xb7b80008 (fctx<br>
> 0xb7bae408(box.mylan.loc/A)): sent<br>
> 02-May-2009 14:23:46.774 resquery 0xb7b80008 (fctx<br>
> 0xb7bae408(box.mylan.loct/A)): senddone<br>
> 02-May-2009 14:23:46.774 fctx 0xb7bae408(<a href="http://ebox.voiplan.pt/A%27" target="_blank">ebox.voiplan.pt/A'</a>): cancelquery<br>
> 02-May-2009 14:23:46.774 dispatch 0xb7b6d378 response 0xb7ba7848<br>
> 192.168.90.254#53: detaching from task 0xb7b6f2c8<br>
> 02-May-2009 14:23:46.774 dispatch 0xb7b6d378: detach: refcount 0<br>
> 02-May-2009 14:23:46.774 dispatch 0xb7b6d378: got packet: requests 0,<br>
> buffers 1, recvs 1<br>
> 02-May-2009 14:23:46.775 dispatch 0xb7b6d378: shutting down; detaching from<br>
> sock 0xb7b79938, task 0xb7b74d70<br>
> 02-May-2009 14:23:46.775 socket 0xb7b79938: destroying<br>
> 02-May-2009 14:23:46.775 dispatchmgr 0xb7bbb168: destroy_mgr_ok:<br>
> shuttingdown=0, listnonempty=1, epool=10, rpool=0, dpool=10<br>
> 02-May-2009 14:23:46.775 shutting down<br>
> 02-May-2009 14:23:46.775 stopping command channel on 127.0.0.1#953<br>
> 02-May-2009 14:23:46.776 res 0xb7bbe200: shutdown<br>
> 02-May-2009 14:23:46.776 res 0xb7bbe200: exiting<br>
> 02-May-2009 14:23:46.776 dns_requestmgr_shutdown: 0xb7b75008<br>
> 02-May-2009 14:23:46.776 send_shutdown_events: 0xb7b75008<br>
> 02-May-2009 14:23:46.777 no longer listening on 127.0.0.1#53<br>
> 02-May-2009 14:23:46.777 clientmgr @0xb7baa3f8: destroy<br>
> 02-May-2009 14:23:46.777 no longer listening on 192.167.200.254#53<br>
> 02-May-2009 14:23:46.777 clientmgr @0xb7baa548: destroy<br>
> ..."<br>
><br>
><br>
> If anybody could give me a hand on this I surelly would appreciate it.<br>
><br>
><br>
> Nelson Vale<br>
><br>
</div></div>> _______________________________________________<br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
><br>
</blockquote></div><br>