<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif">What is 'localhost'? </div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">The output you included doesn't really show very much, other than that nc connect to port 53.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">I'd suggest:</div><div class="gmail_default" style="font-family:verdana,sans-serif">dig <a href="http://ns5.lrau.net">ns5.lrau.net</a> @localhost</div><div class="gmail_default" style="font-family:verdana,sans-serif">dig <a href="http://ns5.lrau.net">ns5.lrau.net</a> @<a href="http://127.0.0.1">127.0.0.1</a><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">dig <a href="http://ns5.lrau.net">ns5.lrau.net</a> @::1<br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Also, have a look in /etc/hosts and make sure that you have something like:</div><div class="gmail_default" style="font-family:verdana,sans-serif">127.0.0.1 localhost<br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">(nc may be connecting over v4 and <whatever else you used to test> may be doing v6, etc...)</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">W</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 1, 2020 at 10:12 AM Axel Rau <<a href="mailto:Axel.Rau@chaos1.de">Axel.Rau@chaos1.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi!<br>
<br>
this is a new server, which answers external queries, sends notifies and pushes axfrs.<br>
It does not answer any query from localhost nor shows any notifies from master in the logs.<br>
<br>
>From local:<br>
root@ns5:/ # nc -v localhost 53<br>
Connection to localhost 53 port [tcp/domain] succeeded!<br>
^C<br>
root@ns5:/ # nc -vu localhost 53<br>
Connection to localhost 53 port [udp/domain] succeeded!<br>
<br>
>From master server:<br>
[hermes:local/etc/namedb] root# nc -v <a href="http://ns5.lrau.net" rel="noreferrer" target="_blank">ns5.lrau.net</a> 53<br>
Connection to <a href="http://ns5.lrau.net" rel="noreferrer" target="_blank">ns5.lrau.net</a> 53 port [tcp/domain] succeeded!<br>
^C<br>
[hermes:local/etc/namedb] root# nc -vu <a href="http://ns5.lrau.net" rel="noreferrer" target="_blank">ns5.lrau.net</a> 53<br>
Connection to <a href="http://ns5.lrau.net" rel="noreferrer" target="_blank">ns5.lrau.net</a> 53 port [udp/domain] succeeded!<br>
<br>
<br>
Any help greatly appreciated,<br>
Axel<br>
<br>
PS:<br>
<br>
part of named.conf:<br>
allow-notify {<br>
hermes-ns5;<br>
};<br>
allow-transfer {<br>
full-trusted;<br>
ns5-ping;<br>
ns4-he;<br>
management-hosts;<br>
};<br>
allow-query { any; };<br>
allow-query-cache { recursive-users; };<br>
allow-recursion { recursive-users; };<br>
<br>
<br>
root@ns5:/usr/local/etc/namedb/working/slave # named -V<br>
BIND 9.16.5 (Stable Release) <id:c00b458><br>
running on FreeBSD amd64 12.1-RELEASE-p8 FreeBSD 12.1-RELEASE-p8 GENERIC<br>
built by make with '--disable-linux-caps' '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--with-dlopen=yes' '--with-libxml2' '--with-openssl=/usr' '--with-readline=-L/usr/local/lib -ledit' '--with-dlz-filesystem=yes' '--disable-dnstap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--with-libidn2=/usr/local' '--with-json-c' '--disable-largefile' '--with-lmdb=/usr/local' '--disable-native-pkcs11' '--without-python' '--disable-querytrace' 'STD_CDEFINES=-DDIG_SIGCHASE=1' '--enable-tcp-fastopen' '--with-tuning=default' '--disable-symtable' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd12.1' 'build_alias=amd64-portbld-freebsd12.1' 'CC=cc' 'CFLAGS=-O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c -fstack-protector-strong ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-DLIBICONV_PLUG -isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf'<br>
compiled by CLANG 4.2.1 Compatible FreeBSD Clang 8.0.1 (tags/RELEASE_801/final 366581)<br>
compiled with OpenSSL version: OpenSSL 1.1.1d-freebsd 10 Sep 2019<br>
linked to OpenSSL version: OpenSSL 1.1.1d-freebsd 10 Sep 2019<br>
compiled with libxml2 version: 2.9.10<br>
linked to libxml2 version: 20910<br>
compiled with json-c version: 0.14<br>
linked to json-c version: 0.15<br>
compiled with zlib version: 1.2.11<br>
linked to zlib version: 1.2.11<br>
threads support is enabled<br>
<br>
default paths:<br>
named configuration: /usr/local/etc/namedb/named.conf<br>
rndc configuration: /usr/local/etc/namedb/rndc.conf<br>
DNSSEC root key: /usr/local/etc/namedb/bind.keys<br>
nsupdate session key: /var/run/named/session.key<br>
named PID file: /var/run/named/pid<br>
named lock file: /var/run/named/named.lock<br>
<br>
---<br>
PGP-Key: CDE74120 ☀ computing @ chaos claudius<br>
<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">I don't think the execution is relevant when it was obviously a bad idea in the first place.<br>This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants.<br> ---maf</div></div>