LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 10-28-2007, 05:30 PM   #1
riotpunk
LQ Newbie
 
Registered: May 2003
Posts: 9

Rep: Reputation: 0
Another Bind problem thread


I'm running RHEL 5, with the BIND server that comes with it.

I used the same settings as I was using on a previous server, but now since changing the DNS servers on the root servers, I can't resolve my hostnames anymore.

It works fine if I look up the name from the server (using nslookup; server localhost; www.keupon.ca) but not if I set the query type to NS, so I guess my server doesn't recognize itself as the SOA.

Also, if I try it from another box, it fails.

Relevant lines from dig +trace:
Code:
keupon.ca.              86400   IN      NS      ns2.keupon.ca.
keupon.ca.              86400   IN      NS      ns1.keupon.ca.
;; Received 99 bytes from 192.228.27.11#53(ca01.cira.ca) in 74 ms

dig: couldn't get address for 'ns2.keupon.ca': failure
I would really appreciate any help I can get. Thanks
Pat

Edit: errr... I dunno why I said that, because a query of type NS gives me the right name servers if I use the localhost.


Edit 2: Here's some clarification about my setup.
I'm using an IPTables firewall managed by APF. Port 53 is open in TCP and UDP. NMAP sees it as open as well.

BIND is chrooted, here is my /etc/named.conf (minus the logging settings):
Code:
 options {
     directory "/etc/namedb";
     pid-file "/var/run/named.pid";
     statistics-file "/var/run/named.stats";
     allow-query { any; };              // This is the default
 };


 controls {
     inet 127.0.0.1 allow { localhost; } keys { rndckey; };
 };



include "/etc/rndc.key";

 zone "." {
     type hint;
     file "root.hints";
 };

 zone "0.0.127.in-addr.arpa" {
     type master;
     file "pz/127.0.0";
 };

zone "keupon.ca" in {
        type master;
        file "pz/keupon.ca";
};

zone "cellsoft-international.com" in {
        type master;
        file "pz/cellsoft-international.com";
};
Yet for some reason all outside queries fail. Very odd.

Last edited by riotpunk; 10-29-2007 at 01:39 PM.
 
Old 10-29-2007, 01:50 PM   #2
riotpunk
LQ Newbie
 
Registered: May 2003
Posts: 9

Original Poster
Rep: Reputation: 0
n/m

never mind all that....

turns out that my firewall (IPTables/apf) filters out all my secondary IP addresses, but follows the rules for the primary one.
 
Old 10-29-2007, 02:07 PM   #3
this213
Member
 
Registered: Dec 2001
Location: ./
Distribution: Fedora, CentOS, RHEL, Gentoo
Posts: 167

Rep: Reputation: 34
That makes very little sense. Why would your firewall filter out secondary addresses? Are you actually assigning secondary addresses for a given domain name (the only purpose for which would be to do round robin)?

Do you actually have an A record for ns2.keupon.ca in your zone file (/var/named/chroot/var/named/pz/keupon.ca)? It has to have an actual IP address there. It should look something like this:
Code:
ns2.keupon.ca.   IN   A   123.123.123.123
 
Old 10-29-2007, 02:36 PM   #4
riotpunk
LQ Newbie
 
Registered: May 2003
Posts: 9

Original Poster
Rep: Reputation: 0
yes... actually traceroute answered my question

my secondary addresses aren't properly setup, so traceroute doesn't even get to the data center... it just gets lost in cyberspace

I guess I wasn't looking in the right place.

Anywho, I contacted my host so hopefully they will fix that issue. Nothing much I can do about it for now... except changing everything to my primary ip, which actually works, but I don't really wanna have to go through all that.

Edit: secondary IP addresses, not DNS... I basically got a primary address, and a range of aliased IP's which differs completely. I can access the server fine through the main one but the rest fails

Last edited by riotpunk; 10-29-2007 at 02:40 PM.
 
Old 10-29-2007, 02:46 PM   #5
this213
Member
 
Registered: Dec 2001
Location: ./
Distribution: Fedora, CentOS, RHEL, Gentoo
Posts: 167

Rep: Reputation: 34
Quote:
Originally Posted by riotpunk
Edit: secondary IP addresses, not DNS... I basically got a primary address, and a range of aliased IP's which differs completely. I can access the server fine through the main one but the rest fails
Ahh, well that makes quite a bit more sense then
 
  


Reply

Tags
bind, dns, named, rhel


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem with a thread class in c++ crapodino Programming 1 09-26-2005 08:02 AM
Main thread sending notification to child thread rajesh_b Programming 1 09-22-2004 09:15 AM
configure qt thread issue (just compiled qt w/ -thread option) cleff Linux - Software 8 05-07-2004 11:11 PM
Qt Thread Support Problem zombyLINUX Linux - Software 4 03-30-2004 02:26 PM
New Thread problem jeremy LQ Suggestions & Feedback 0 04-03-2002 08:06 AM


All times are GMT -5. The time now is 08:52 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration