DNs problem

qwertyjjj · 01-30-2010, 09:55 AM

Occasionally we get a DNS error on squid and I was wondering if it is related to bandwidth stauration or whether it could be these settings. My server was restarted recently and maybe it lost some settings in plesk.
Are there any command line tools I can use to check the BIND DNS?
Websites are resolved normally when I restart squid but occasioannly it loses some of them.

prasanta · 01-30-2010, 11:09 AM

Never used plesk. You can use the nslookup/host tool from the cli. You can specify the server name also, to which server it should query for the domains.

--
Prasanta

HasC · 01-30-2010, 11:25 AM

dig and nslookup

qwertyjjj · 01-30-2010, 04:12 PM

Quote:

Originally Posted by HasC

dig and nslookup

dig gives me this:
is it configured correctly?
Is there any possibility of a dns timeout that might fix itself when squid is restarted?
Not sure what is causing the issue of squid not being able to lookup some websites.
I tried nslookup www.skyplayer.com and it worked successfully.

Is it worth restarting the BIND server nightly: /etc/init.d/named restart

Code:

[root@server]# dig

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>>
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15604
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13

;; QUESTION SECTION:
;.                              IN      NS

;; ANSWER SECTION:
.                       261039  IN      NS      e.root-servers.net.
.                       261039  IN      NS      j.root-servers.net.
.                       261039  IN      NS      c.root-servers.net.
.                       261039  IN      NS      f.root-servers.net.
.                       261039  IN      NS      i.root-servers.net.
.                       261039  IN      NS      g.root-servers.net.
.                       261039  IN      NS      h.root-servers.net.
.                       261039  IN      NS      d.root-servers.net.
.                       261039  IN      NS      k.root-servers.net.
.                       261039  IN      NS      b.root-servers.net.
.                       261039  IN      NS      l.root-servers.net.
.                       261039  IN      NS      m.root-servers.net.
.                       261039  IN      NS      a.root-servers.net.

;; ADDITIONAL SECTION:
i.root-servers.net.     3598798 IN      A       192.36.148.17
h.root-servers.net.     3598798 IN      A       128.63.2.53
c.root-servers.net.     3598798 IN      A       192.33.4.12
k.root-servers.net.     3598798 IN      A       193.0.14.129
a.root-servers.net.     3598798 IN      A       198.41.0.4
g.root-servers.net.     3598798 IN      A       192.112.36.4
l.root-servers.net.     3598798 IN      A       199.7.83.42
b.root-servers.net.     3598798 IN      A       192.228.79.201
f.root-servers.net.     3598798 IN      A       192.5.5.241
e.root-servers.net.     3598798 IN      A       192.203.230.10
m.root-servers.net.     3598798 IN      A       202.12.27.33
d.root-servers.net.     3598798 IN      A       128.8.10.90
j.root-servers.net.     3598798 IN      A       192.58.128.30

;; Query time: 7 msec
;; SERVER: 213.171.192.249#53(213.171.192.249)
;; WHEN: Sat Jan 30 22:10:38 2010
;; MSG SIZE  rcvd: 449

qwertyjjj · 02-01-2010, 06:53 PM

any ideas?

qwertyjjj · 02-01-2010, 07:14 PM

I found out that the nscd service was not started as when I tried to restart it it failed on the stopping section.
However, I believe the DNS caching is done by BIND on my server.
Could the nscd have been the issue?

qwertyjjj · 02-08-2010, 08:04 AM

I have put the nameservers into squid.conf. However, today I received the same error.
Squid times out on the following site https://www.skyplayer.com
This is the dig result:

Quote:

[root@# dig skyplayer.sky.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> skyplayer.sky.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35479
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;skyplayer.sky.com. IN A

;; ANSWER SECTION:
skyplayer.sky.com. 300 IN CNAME wildcard.sky.com.edgekey.net.
wildcard.sky.com.edgekey.net. 21600 IN CNAME e3228.b.akamaiedge.net.
e3228.b.akamaiedge.net. 20 IN A 92.123.93.52

;; Query time: 162 msec
;; SERVER: 213.171.192.249#53(213.171.192.249)
;; WHEN: Mon Feb 8 13:57:05 2010
;; MSG SIZE rcvd: 126

If dig works and nslookup gives:

Quote:

[root@]# nslookup skyplayer.com
Server: 213.171.192.249
Address: 213.171.192.249#53

Non-authoritative answer:
Name: skyplayer.com
Address: 80.238.9.232

Any reasons why squid won't resolve it?

qwertyjjj · 02-09-2010, 09:19 AM

I have solved this by using the openDNS servers in the squid.conf instead.
Not ideal as this is an external lookup but not sure what the problem is with BIND.