<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 01/09/13 08:39, Daniele wrote:<br>
</div>
<blockquote
cite="mid:CAL_2sc06Nf_aQ=EA0ASHzXvkfZS9918P9zszXCRXAcA+hZu5=w@mail.gmail.com"
type="cite">
<div dir="ltr">2013/1/9 Phil Mayers <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:p.mayers@imperial.ac.uk"
target="_blank">p.mayers@imperial.ac.uk</a>></span><br>
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 09/01/13 13:53, Daniele wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
This is the scenario.<br>
<br>
I installed BIND9 via `apt-get` on a newly installed
UBUNTU 12.04,<br>
virtualized on VirtualBox.<br>
The network works properly because if I indicate a
different server from<br>
my own BIND9 (the first line of '/etc/resolv.conf'
is, for example,<br>
`nameserver 8.8.8.8`) the lookups and any action on
the Internet succeed.<br>
<br>
</blockquote>
<br>
</div>
No, this assumption is not valid.</blockquote>
<div><br>
</div>
<div style="">I meant that I can reach the Internet and,
vice versa, the Internet can reach my terminal. </div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
Recursive queries that named does for a client are different than
your machine as a dns client reaching out to Google's recursive
service.<br>
<br>
You need to have UDP & TCP port 53 open to your recursive
server(the one running named) first of all. And if any network
element within your network limits the size of UDP packets, you will
have problems with EDNS0 queries.<br>
<br>
On this box running named, try this:<br>
<br>
dig +trace <a class="moz-txt-link-abbreviated" href="http://www.msn.com">www.msn.com</a><br>
<br>
dig +trace imperial.ac.uk<br>
<br>
After dig gets a copy of the root servers from the local named, it
will do the same type of queries that a recursive name server does.<br>
<br>
Lyle Giese<br>
LCR Computer Services, Inc.<br>
<br>
</body>
</html>