LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-30-2014, 11:34 AM   #1
samalchow
LQ Newbie
 
Registered: Jan 2014
Location: Colorado
Distribution: Debian/Centos
Posts: 18

Rep: Reputation: Disabled
Bind DNS issues with all Apple/Mac/iOS devices on my network.


Noticed earlier that someone was having issues with DNS on Windows. If this is similar enough to join that post, please move if possible.

Anywho... I wanted to play around with Bind so I setup a DNS server on my network. All 3 of my Linux machines and Windows box can ping and correctly resolve to the correct address fine. I can access my NAS via a web browser just by the dns name equally as well. I've setup my DNS address on my DHCP server so that it will try my internal one because moving on to Google's.

Now for whatever reason, my one Mac and all of our iOS devices do not work. All of them can ping the server fine but nslookup, dig, host... nothing works. All these devices show my 10.0.1.60 dns server listed in their network settings, but still no go.

I've include my bind configuration. Does Apple software require something I'm missing? Or is the syntax just off?
Attached Files
File Type: txt dns_settings.txt (1.4 KB, 12 views)
 
Old 01-30-2014, 12:41 PM   #2
clacour
Member
 
Registered: Sep 2003
Location: Dallas, Tx, USA
Distribution: Red Hat, Gentoo, Libranet
Posts: 98

Rep: Reputation: 16
If you can ping the box that's running named from all of the other systems, your network connectivity is fine.

If you can resolve addresses in your domain (dnsserver.co) correctly on some of the other boxes, then your DNS setup is fine.

That suggests to me that the problem is something like an internal firewall.

A few things to try:

On the nameserver box, do
Code:
iptables -L
. If it comes back with the default (three chains, INPUT, FORWARD, and OUTPUT, all with a policy of ACCEPT, and nothing more), then there's no firewall on your DNS box. (There probably isn't, it's just something that needs to be checked.)

From the Mac box, try
Code:
telnet 10.0.1.60 <port>
where port is (one at a time) 22 (ssh), 23 (telnet), 53 (DNS) and 54 (nothing I know of). You're looking for differences in what you get. Most likely, ssh is open, telnet is closed, dns is what we're curious about, and 54 is just there in case you get something different from a closed port and a non-existent one. (Shouldn't, but...)

If you get something similar to the ssh port from the DNS port, then you have connectivity to the service, and something weird is going on.

From the Mac, try both
Code:
# nslookup ns1.dnsserver.com ns1.dnsserver.com
and
# nslookup ns1.dnsserver.com  10.0.1.60
If the IP address version works, but the other doesn't, you haven't correctly told the Mac where/what to look for nameservers. (Since OS X derives a lot from BSD, it should be pretty similar to your Linux machines, but I don't know Macs well enough to guarantee that.)

If neither variant of nslookup works, and you've eliminated a firewall running on the DNS box, then there almost has to be something on the Mac and IOS devices.

I can't help much with finding/opening a hole in the firewall on those.

One last thought, if these machines are getting their network information from DHCP (likely), they're most likely getting it from the wireless router. That info might be stored somewhere other than /etc/resolv.conf, or anyplace else you'd normally specify that stuff. You should be able to get into your router, and you may be able to change what it passes out as a list of DNS servers. I'd put yours last, not first. Nothing else will resolve that domain, and you don't want to risk breaking your internet connection. (Note, if this is the problem, then the IP version of the nslookup command should work.)

Hope this helps
 
Old 01-30-2014, 01:06 PM   #3
samalchow
LQ Newbie
 
Registered: Jan 2014
Location: Colorado
Distribution: Debian/Centos
Posts: 18

Original Poster
Rep: Reputation: Disabled
Does help. Did a few restarts (just for fun) and here is where I'm at now.

1) Turned off iptables on the dns server
2) Also have recursion turned off so i'm unable to use nslookup. This also might be the issue but don't know yet.


So dig shows the following:

dig nas.dnsserver.co

; <<>> DiG 9.8.3-P1 <<>> nas.dnsserver.co
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27599
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;nas.dnsserver.co. IN A

;; ANSWER SECTION:
nas.dnsserver.co. 604800 IN A 10.0.1.99

;; AUTHORITY SECTION:
dnsserver.co. 604800 IN NS ns1.dnsserver.co.

;; ADDITIONAL SECTION:
ns1.dnsserver.co. 604800 IN A 10.0.1.60

;; Query time: 73 msec
;; SERVER: 10.0.1.60#53(10.0.1.60)
;; WHEN: Thu Jan 30 12:02:41 2014
;; MSG SIZE rcvd: 82

But when I try to ping, it doesn't work.

ping nas.dnsserver.co
ping: cannot resolve nas.dnsserver.co: Unknown host

Ping just the ip works fine though.

ping 10.0.1.99
PING 10.0.1.99 (10.0.1.99): 56 data bytes
64 bytes from 10.0.1.99: icmp_seq=0 ttl=64 time=2.518 ms
64 bytes from 10.0.1.99: icmp_seq=1 ttl=64 time=0.262 ms
64 bytes from 10.0.1.99: icmp_seq=2 ttl=64 time=0.273 ms
64 bytes from 10.0.1.99: icmp_seq=3 ttl=64 time=0.361 ms
64 bytes from 10.0.1.99: icmp_seq=4 ttl=64 time=0.366 ms
64 bytes from 10.0.1.99: icmp_seq=5 ttl=64 time=0.361 ms
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] DNS issues BIND 9.7.3 whositwhatnow Linux - Newbie 11 03-13-2012 02:16 PM
CentOS 6 + DNS Bind issues..please help mkind Linux - Newbie 1 08-06-2011 03:30 AM
BIND DNS issues joel112 Linux - Software 3 05-31-2006 04:03 AM
DNS issues with BIND xemous Linux - Networking 6 01-12-2005 11:18 AM
Bind ETH devices to specific NIC/MAC not_an_expert Slackware 8 10-13-2004 11:00 AM


All times are GMT -5. The time now is 09:11 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration