<span class="Apple-style-span" style="border-collapse: collapse; ">I'm seeing lots of DNS resolution failures on my router (running Utuntu 8.10, bind 9.3.4). While most succeed, I get quite a few FORMERR errors similar to:<div>
<br></div><div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 66.151.140.2#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.168.3.1#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.112.36.4#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 128.63.2.53#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.228.79.201#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.36.148.17#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 202.12.27.33#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.33.4.12#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.5.5.241#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.58.128.30#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 128.8.10.90#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 198.41.0.4#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 192.203.230.10#53</div>
<div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 193.0.14.129#53</div><div>May 4 20:25:25 localhost named[19579]: FORMERR resolving '<a href="http://imap.gmail.com/A/IN" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com/A/IN</a>': 199.7.83.42#53</div>
<div><br></div><div>I'm running an iptables firewall on this box, which is connected to the internet via a wireless access point on my roof with a link to my ISP. As a result of the above FORMERRs, clients on my lan are unable to resolve addresses -- in the above case, <a href="http://imap.gmail.com" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com</a>, and therefore are unable to access mail. Upon the recommendations of someone familiar with the relevant technologies, I've updated my DNS (named.conf) to set the edns-udp-size 500 option. This had no effect. </div>
<div><br></div><div>If I use dig to resolve <a href="http://imap.gmail.com" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com</a> manually, by specifying any of the above-mentioned DNS servers, everything works fine. In fact, I can usually force my DNS server to begin resolving these address (e.g. <a href="http://imap.gmail.com" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com</a>) for a LITTLE while, by manually using nslookup and querying first for the NS record of <a href="http://gmail.com" target="_blank" style="color: rgb(42, 93, 176); ">gmail.com</a>, and then for the A record of <a href="http://imap.gmail.com" target="_blank" style="color: rgb(42, 93, 176); ">imap.gmail.com</a>. Once I succeed in getting a resolution, the address record is cached, and my DNS will resolve the hostname until the cache time is exceeded. And then I'm back to no resolution and FORMERRs. </div>
<div><br></div><div>Can anyone suggest anything I can try? </div><div><br></div><div>Thanks much. -- Eric</div></div></span>