<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#ffffff">
Hey Everyone,<br>
<br>
We've setup and internal DNS on a Debian 6.0 Squeeze server with
Bind 9 running on it.<br>
<br>
A few things specific to our configuration are:<br>
<ul>
<li>This is not a caching only server. We've have our own internal
domain. We also have a dns slave running on another server. The
internal domain looks something like this:
xxx.existingdomain.com - The subdomain xxx does not actually
exist, we've just made it up for our bind config.<br>
</li>
<li>We made sure Bind listens on a specific address and port by
using the following:</li>
<ul>
<li>query-source address X.X.X.X port 53;</li>
<li>listen-on { X.X.X.X; };</li>
<li>listen-on-v6 { none; };</li>
</ul>
<li>This is what our Forwarders Section in named.conf.options
looks like:</li>
</ul>
<blockquote>
<blockquote>
<blockquote> forwarders {<br>
66.7.224.17; //Telepacific's DNS server<br>
};<br>
</blockquote>
</blockquote>
</blockquote>
The problem we're running into is:<br>
<ul>
<li>Whenever we do something like dig @X.X.X.X <a class="moz-txt-link-abbreviated" href="http://www.somedomain.com">www.somedomain.com</a>
the request times out for a while before working. Once we get an
answers, we're thinking that the answer gets cached, the same
lookup if performed again comes back with an instant answer.
We've recreated this multiple times using different domain
names.</li>
<li>The whois lookup works as long as we're telepacific's dns
server.</li>
<li>To troubleshoot we added the google dns server, 8.8.8.8, as
one of the forwarders and voila! all the answers to dig lookups
were instantaneous. But now the whois lookups would not work at
all.</li>
</ul>
We've rules out the firewall by dropping all the rules and still
receiving the same behavior. We can clearly see that the queries are
going out from the query log. Any other logging options that can be
enabled to troubleshoot this issue?<br>
<br>
Any help is much appreciated. We've been spending hours trying to
solve the mystery.<br>
<br>
Thank you,<br>
<div class="moz-signature">-- <br>
<b>Harsha</b> | <a class="moz-txt-link-abbreviated" href="mailto:harsha@thought-matrix.com">harsha@thought-matrix.com</a> <br \="">
Systems Administrator | ThoughtMatrix, Inc.<br \="">
</div>
</body>
</html>