LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 12-04-2012, 12:23 AM   #1
wasamzy
Member
 
Registered: Apr 2009
Location: Ghana Accra
Posts: 64

Rep: Reputation: 15
Bind not resolving remote domains


Hi all,

I have two DNS server (primary and secondary) which uses bind9. The problem am having currently is that, my primary dns server is able to resolve both private and remote domains while the secondary server is able to resolve only the local domains but not able to resolve the remote domains.

Primary server test:

local domain:

$ host zorinco.com 192.168.2.30
Using domain server:
Name: 192.168.2.30
Address: 192.168.2.30#53
Aliases:

zorinco.com has address 64.81.168.12
zorinco.com mail is handled by 10 mail.zorinco.com.

remote domain test:

$ host yahoo.com 192.168.2.30
Using domain server:
Name: 192.168.2.30
Address: 192.168.2.30#53
Aliases:

yahoo.com has address 72.30.38.140
yahoo.com has address 98.138.253.109
yahoo.com has address 98.139.183.24
yahoo.com mail is handled by 1 mta6.am0.yahoodns.net.
yahoo.com mail is handled by 1 mta7.am0.yahoodns.net.
yahoo.com mail is handled by 1 mta5.am0.yahoodns.net.




Secondary server test

local domain test:

$ host zorinco.com 192.168.2.20
Using domain server:
Name: 192.168.2.20
Address: 192.168.2.20#53
Aliases:

zorinco.com has address 64.81.168.12
zorinco.com mail is handled by 10 mail.zorinco.com.


remote domain test:
$ host yahoo.com 192.168.2.20
Using domain server:
Name: 192.168.2.20
Address: 192.168.2.20#53
Aliases:




As you can see the "Aliases" section of the secondary server test for remote domain test, there is no answer.

Please what could be the possible cause? This means if my primary server failed, the secondary server can not act on it's behalf.


Thank you.
 
Old 12-05-2012, 11:04 AM   #2
mmheera
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Ubuntu, Debian, Fedora,Windows 7
Posts: 107

Rep: Reputation: 11
You should have a working root.db file. And assuming your settings/configurations are correct, there can be a firewall issue that is blocking outbound connection to port 53 from your secondary server. You may check from the server whether you can telnet to outside world on port 53, for exampale, to ip 4.2.2.2.

Thanks!
 
Old 12-11-2012, 05:57 AM   #3
wasamzy
Member
 
Registered: Apr 2009
Location: Ghana Accra
Posts: 64

Original Poster
Rep: Reputation: 15
I can telnet to 4.2.2.2 via port 53 from the slave server. And also Though I don't have root.db file, I have named.ca which contain the below data:

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.5 <<>> +bufsize=1200 +norec NS . @a.root-servers.net
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30911
;; flags: qr aa; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 23

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;. IN NS

;; ANSWER SECTION:
. 518400 IN NS g.root-servers.net.
. 518400 IN NS e.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN NS m.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS a.root-servers.net.
. 518400 IN NS l.root-servers.net.

;; ADDITIONAL SECTION:
a.root-servers.net. 3600000 IN A 198.41.0.4
a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:3

And so on .......


Will that affect some thing? If yes, how do I add the root.db and also, I check the primary server too and it is not having the root.db file but able to resolve remote domains.
 
Old 12-11-2012, 10:26 AM   #4
mmheera
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Ubuntu, Debian, Fedora,Windows 7
Posts: 107

Rep: Reputation: 11
Do you have an entry like this below in your zone file? You need this for the root servers to work and for your external domain name resolution.

zone "." in{
type hint;
file "named.ca";
};

This is a very good site for bind related issues:

http://www.zytrax.com/books/dns/ch7/


And here are two troubleshooting links for bind9 and may be you can find more relevant ones for your OS.

http://linux.overshoot.tv/wiki/serve...shooting_bind9

https://help.ubuntu.com/8.04/serverg...eshooting.html

First, you should enable logging for the bind service and check syslog or relevant log files for issues. That can be a good starting point.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Bind not resolving remote domains wasamzy Linux - Server 2 12-04-2012 02:54 AM
Some domains not resolving by some DNS servers. Seregwethrin Linux - Server 2 04-15-2009 09:47 PM
/etc/resolv.conf resolving sub-domains noir911 Linux - Server 2 02-10-2008 10:29 PM
Bind not resolving .org domains ggandy Linux - Networking 0 11-23-2004 05:16 PM
no domains resolving ? zeedoo Linux - Networking 3 07-12-2004 11:24 AM


All times are GMT -5. The time now is 11:29 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration