<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 9/30/14, 5:52 PM, Rich Goodson
wrote:<br>
</div>
<blockquote
cite="mid:3CDC5CAA-32A9-410A-8A44-318874D1CD99@gronkulator.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
If named is running and doesn’t respond on the external interface,
it’s possible that your listen-on {}; directive is set to only
localhost.</blockquote>
<br>
You may have hit on hit there. It was set to <br>
listen-on { 127.0.0.1; }; <br>
<br>
I just changed that to: <br>
listen-on { 205.238.182.102; }; <br>
and it appears to have made all the difference. <br>
<br>
I'm no longer seeing the errors from (at least, some of) the online
DNS tests that 102 doesn't respond. I'm guessing the others have
cached info from lookups earlier today.<br>
<br>
Please let me know if you see otherwise. <br>
<br>
Now to get on with some of the other cleanup tasks. <br>
<br>
Thanks for the help. <br>
<blockquote
cite="mid:3CDC5CAA-32A9-410A-8A44-318874D1CD99@gronkulator.com"
type="cite">
<div><br>
</div>
<div>TCP connections to 205.238.182.102 come back “Connection
refused”, so it’s possible that BIND just isn’t listening on the
interface or perhaps you’re filtering the inbound queries. Do
you see the queries come in to the box, either via packet dump
or query logs?</div>
<div><br>
</div>
<div><br>
</div>
<div>-Rich<br>
<div><br>
</div>
<div><br>
<div>
<div>On Sep 30, 2014, at 5:30 PM, Bill Christensen <<a
moz-do-not-send="true"
href="mailto:billc_lists@greenbuilder.com">billc_lists@greenbuilder.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 9/30/14, 4:15 PM,
Charles Swiger wrote:<br>
</div>
<blockquote
cite="mid:C88C07DE-B632-489A-BB87-4BEC05AB2BE9@mac.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
Hi--
<div><br>
</div>
<div>On Sep 30, 2014, at 1:59 PM, Bill Christensen
<<a moz-do-not-send="true"
href="mailto:billc_lists@greenbuilder.com">billc_lists@greenbuilder.com</a>>
wrote:</div>
<div>
<div>
<blockquote type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<div bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Fair enough. <br>
<br>
<meta http-equiv="content-type"
content="text/html; charset=ISO-8859-1">
<a moz-do-not-send="true" class="ui_link"
href="http://localhost:10800/bind8/edit_master.cgi?zone=Africabound.org">
<meta http-equiv="content-type"
content="text/html; charset=ISO-8859-1">
</a><a moz-do-not-send="true"
href="http://africabound.org/">Africabound.org</a><br>
<a moz-do-not-send="true"
href="http://SustainableSources.com">SustainableSources.com</a><br>
<br>
The server that's giving problems is <a
moz-do-not-send="true"
href="http://ns1.sustainablesources.com">ns1.sustainablesources.com</a>
205.238.182.102<br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<div>Your 102 box doesn't seem responding to 53/udp or
53/tcp from the outside:</div>
<div><br>
</div>
<div> <a moz-do-not-send="true"
href="http://www.dnsinspect.com/sustainablesources.com/1412110958">http://www.dnsinspect.com/sustainablesources.com/1412110958</a></div>
<div><br>
</div>
<div>There's a bunch of other issues. In particular,
BIND 9.6-ESV is the oldest version</div>
<div>which anyone should be running on the public
internet, and even that is sufficiently</div>
<div>obsolete that I think support for that ended this
year.</div>
<div><br>
</div>
<div>Regards,</div>
<div>-- </div>
<div>-Chuck</div>
<div><br>
</div>
</blockquote>
I'm aware that the BIND 9.6 on the other machine is
rather ancient, and have plans to move off it in the
reasonably near future. And the other issues. Trying
to clean them all up. <br>
<br>
But I still have the initial problem of getting <a
moz-do-not-send="true"
href="http://ns1.sustainablesources.com">ns1.sustainablesources.com</a>
205.238.182.102 to answer. This is a clean install of
the latest BIND available, after a system upgrade, so
there's probably something wrong with my config.
Problem is, I don't know what. I've been over it dozens
of times and am stuck, otherwise I wouldn't have posted
here. <br>
<br>
Is it kosher to post the config file here? <br>
</div>
_______________________________________________<br>
Please visit <a moz-do-not-send="true"
href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a>
to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></blockquote>
</div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
<br>
</body>
</html>