<div dir="ltr">Hi Robert.<div>May we see the file /etc/resolv.conf and your BIND configuration? It's difficult to guess what might be going on with only a small snippet of information.</div><div>If you "ping somewhere" (or "ssh a-server", or whatever) the OS will consult resolv.conf to determine where to send DNS queries. If that's not your local instance of BIND then you could be looking for trouble in the wrong place.</div><div><br></div><div>If you *do* have an address of the local machine as the first 'nameserver' entry in resolv.conf you will need to know what that query looks like to determine how BIND is going to handle it.</div><div>You also need to know what BIND will try and do when it does receive queries.</div><div><br></div><div>Packet captures are your friend here, using tcpdump (to disk, not to screen). Gather evidence first, then make theories.</div><div><br></div><div>Cheers, Greg</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 3 Aug 2022 at 14:29, Robert Moskowitz <<a href="mailto:rgm@htt-consult.com" target="_blank">rgm@htt-consult.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Part of my problem is that caching does not seem to be working in my <br>
internal view.<br>
<br>
Something is happening such that my internal systems AND the server <br>
itself cannot resolve names and looses it even 5 min later, indicating <br>
not caching.<br>
<br>
I read <a href="https://kb.isc.org/docs/aa-00851" rel="noreferrer" target="_blank">https://kb.isc.org/docs/aa-00851</a><br>
<br>
In my include for the internal view (named.internal) I have:<br>
<br>
match-clients { httnets; };<br>
match-destinations { httnets; };<br>
allow-query { httnets; };<br>
allow-query-cache { httnets; };<br>
allow-recursion { any; };<br>
recursion yes;<br>
empty-zones-enable yes;<br>
<br>
Yet I get on my DNS server:<br>
<br>
ping <a href="http://www.google.com" rel="noreferrer" target="_blank">www.google.com</a><br>
ping: <a href="http://www.google.com" rel="noreferrer" target="_blank">www.google.com</a>: Name or service not known<br>
<br>
Then later it works.<br>
<br>
Then later it doesn't again.<br>
<br>
Sigh. If at least caching was working for internal use, I would be able <br>
to work more smoothy?<br>
<br>
<br>
<br>
<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>