DNS lookup problem at ca.gov on FC5

desibeli · 12-01-2006, 10:33 AM

My name-server won't resolve addresses at .ca.gov. I can find any .com address I have tried, I can find whitehouse.gov, but I cannot find ca.gov addresses, e.g www.dmv.ca.gov

I'm using FC5 and just added a local zone for 192.168.0. I have attached the zone files below.

192.168.0.db
------------
$TTL 1H
@ SOA server.kimschulze.com. root.server.kimschulze.com. ( 8
3H
1H
1W
1H )
NS server.kimschulze.com.
14 PTR server.kimschulze.com.
1 PTR router.kimschulze.com.
13 PTR e6600.kimschulze.com.

kimschulze.com.db
-----------------
$TTL 1H
@ SOA server root.server.kimschulze.com. ( 10
3H
1H
1W
1H )
NS server
server IN 1H A 192.168.0.14
router IN 1H A 192.168.0.1
e6600 IN 1H A 192.168.0.13
ns IN 1H CNAME server
router IN 1H A 192.168.0.1
www IN 1H CNAME server
mail IN 1H CNAME server

Any hints?

chort · 12-01-2006, 01:00 PM

What does your named.conf look like?

Did you have these problems before you added the zone files for your forward and/or reverse zone?

BTW in your kimschulze.com.db zone file you should fully qualify your SOA:

Code:

@ SOA server root.server.kimschulze.com. -> @ SOA server.kimschulze.com. root.server.kimschulze.com.

You should not have CNAMES for any NS records:

Code:

ns IN 1H CNAME server -> ns IN 1H A 192.168.0.14

The above problems shouldn't prevent you from looking up a third-level domain, but it's better to be correct when possible. The problem is likely in your named.conf, perhaps a bad forwarder or something.

desibeli · 12-01-2006, 01:16 PM

Here is named.conf
==================

//
// named.conf for Red Hat caching-nameserver
//

options {
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

zone "0.168.192.in-addr.arpa." IN {
type master;
file "192.168.0.db";
};
zone "kimschulze.com." IN {
type master;
file "kimschulze.com.db";
};
zone "." IN {
type hint;
file "named.ca";
};

zone "localdomain" IN {
type master;
file "localdomain.zone";
allow-update { none; };
};

zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.ip6.local";
allow-update { none; };
};

zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
allow-update { none; };
};

zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
allow-update { none; };
};

include "/etc/rndc.key";

chort · 12-01-2006, 01:41 PM

Hmmm, nothing obvious stands out. That all looks pretty standard.

What's the output of:

Code:

$ dig ca.gov soa
$ dig ca.gov ns

?

desibeli · 12-01-2006, 01:48 PM

Thanks for the quick answers, I'm puzzled too.

[root@server etc]# dig ca.gov soa
;; Warning: ID mismatch: expected ID 15552, got 20509

; <<>> DiG 9.3.3rc2 <<>> ca.gov soa
;; global options: printcmd
;; connection timed out; no servers could be reached

[root@server etc]# dig ca.gov ns
;; Warning: ID mismatch: expected ID 8309, got 15552
;; Warning: ID mismatch: expected ID 8309, got 15552
;; Warning: ID mismatch: expected ID 8309, got 15552

; <<>> DiG 9.3.3rc2 <<>> ca.gov ns
;; global options: printcmd
;; connection timed out; no servers could be reached

[root@server etc]# dig gov soa

; <<>> DiG 9.3.3rc2 <<>> gov soa
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52045
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 7, ADDITIONAL: 0

;; QUESTION SECTION:
;gov. IN SOA

;; ANSWER SECTION:
gov. 2560 IN SOA a.gov.zoneedit.com. govcontact.zoneedit.com. 1164978065 3600 900 1814400 86400

;; AUTHORITY SECTION:
gov. 259200 IN NS a.gov.zoneedit.com.
gov. 259200 IN NS b.gov.zoneedit.com.
gov. 259200 IN NS c.gov.zoneedit.com.
gov. 259200 IN NS d.gov.zoneedit.com.
gov. 259200 IN NS e.gov.zoneedit.com.
gov. 259200 IN NS f.gov.zoneedit.com.
gov. 259200 IN NS g.gov.zoneedit.com.

;; Query time: 107 msec
;; SERVER: 192.168.0.14#53(192.168.0.14)
;; WHEN: Fri Dec 1 11:46:26 2006
;; MSG SIZE rcvd: 196

[root@server etc]# dig gov ns

; <<>> DiG 9.3.3rc2 <<>> gov ns
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41741
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;gov. IN NS

;; ANSWER SECTION:
gov. 259177 IN NS g.gov.zoneedit.com.
gov. 259177 IN NS a.gov.zoneedit.com.
gov. 259177 IN NS b.gov.zoneedit.com.
gov. 259177 IN NS c.gov.zoneedit.com.
gov. 259177 IN NS d.gov.zoneedit.com.
gov. 259177 IN NS e.gov.zoneedit.com.
gov. 259177 IN NS f.gov.zoneedit.com.

;; Query time: 1 msec
;; SERVER: 192.168.0.14#53(192.168.0.14)
;; WHEN: Fri Dec 1 11:46:49 2006
;; MSG SIZE rcvd: 149