Bind: linux resolving, windows not

ReefShark · 04-03-2006, 01:29 PM

I have a weird problem. I set up a Bind DNS server on my Gentoo box this
week (Bind 9.3.2) to run my domain within my private network. Some entries
will resolv to the local IP within the local LAN (given by my personal
Bind server) while the big bad outside will get my external IP through the
regular DNS servers. So far so good.
- When I resolv a name (CNAME) locally, it works fine (duh)

Code:

; <<>> DiG 9.3.2 <<>> knagers.somedomain.nl
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41186
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;knagers.somedomain.nl.                IN      A

;; ANSWER SECTION:
knagers.somedomain.nl. 259200  IN      CNAME   sirius.somedomain.nl.
sirius.somedomain.nl.  259200  IN      A       192.168.1.69

;; AUTHORITY SECTION:
somedomain.nl.         259200  IN      NS      ns.somedomain.nl.

;; Query time: 3 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Apr  3 20:20:20 2006
;; MSG SIZE  rcvd: 94

- Now, for the linux install (also gentoo) on my laptop.

Code:

; <<>> DiG 9.3.2 <<>> knagers.somedomain.nl
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40375
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;knagers.somedomain.nl.                IN      A

;; ANSWER SECTION:
knagers.somedomain.nl. 259200  IN      CNAME   sirius.somedomain.nl.
sirius.somedomain.nl.  259200  IN      A       192.168.1.69

;; AUTHORITY SECTION:
somedomain.nl.         259200  IN      NS      ns.somedomain.nl.

;; Query time: 2 msec
;; SERVER: 192.168.1.69#53(192.168.1.69)
;; WHEN: Mon Apr  3 20:07:31 2006
;; MSG SIZE  rcvd: 94

Also working!

-Now the same box, just the windows (W2K) part of it (it's a dual boot).

Code:

*** Can't find server name for address 192.168.1.69: Server failed
Server:  resolver.xs4all.nl
Address:  194.109.104.104

Non-authoritative answer:
Name:    knagers.somedomain.nl
Address:  194.255.15.233

Weird part is that this particular box gets its network settings from my
WiFi router, and they are the same (same IP, same default gw, same DNS
entries). So network settings can't be the problem... can they?
Same problem (and error) on the WinXP box of my wife.

It's a weird problem I haven't figured out yet, not even after some Googling and searching these forums. Hope someone can point me towards a solution (no, installing linux on the windows boxes is not a 'solution'... it's a workaround

).

(domain names and ip's have been changed to protect the innocent)

ARC1450 · 04-04-2006, 09:12 AM

Try clearing the dns cache in Winders.

ipconfig /flushdns

Also, you may have to do an ipconfig /release && ipconfig /renew to get WinXP to actually pick up the new settings. I had an issue when I first set up my network with all this type stuff, and I had to flush the dns and release/renew the IP manually. Seems XP likes to hold onto stuff like it shouldn't.

nx5000 · 04-04-2006, 10:20 AM

Quote:

Originally Posted by ReefShark

Weird part is that this particular box gets its network settings from my
WiFi router, and they are the same (same IP, same default gw, same DNS
entries). So network settings can't be the problem... can they?

You could try nslookup -d but I'm not sure it will give you more info..
Also you can start bind with debug option (man named)

From the windows you can ping the gentoo ? I guess you already tried that

Can you telnet to the port 53 of the gentoo?
from the windows : telnet 192.168.1.9 53.
Maybe you miss an "acl" directive in bind option file.

ReefShark · 04-05-2006, 12:38 PM

@ARC1450
Looks like Windows does try to query the server, but doesn't get a reply.
I actually had the Win-boxes pointed towards the (now installed) primary DNS months ago, and my IPS's as secundary. But despite that, I did what you suggested and it didn't help.

Quote:

Originally Posted by nx5000

You could try nslookup -d but I'm not sure it will give you more info..

Code:

C:\Documents and Settings\someuser.WINBOXES>nslookup -d knagers.somedomain.nl
Got answer:
    HEADER:
        opcode = QUERY, id = 1, rcode = SERVFAIL
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        69.153.168.192.in-addr.arpa, type = PTR, class = IN

------------
*** Can't find server name for address 192.168.153.69: Server failed
------------
Got answer:
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 1,  authority records = 0,  additional = 0

    QUESTIONS:
        104.104.109.194.in-addr.arpa, type = PTR, class = IN
    ANSWERS:
    ->  104.104.109.194.in-addr.arpa
        name = resolver.xs4all.nl

Quote:

Originally Posted by nx5000

Also you can start bind with debug option (man named)

From the windows you can ping the gentoo ? I guess you already tried that

Can you telnet to the port 53 of the gentoo?
from the windows : telnet 192.168.1.9 53.
Maybe you miss an "acl" directive in bind option file.

Bind is running:

Code:

named     7964     1  0 20:28 ?        00:00:00 /usr/sbin/named -u named -n 1 -t /chroot/dns

When I try to query the server, nothing shows up in syslog. It is as if the query never reaches the server (but it does when I do the same thing with the same network setting on linux).

ReefShark · 04-11-2006, 11:29 PM

Figured it out; there was an error in the IN SOA record of the reverse domain.

"Check your logging whenever you have a problem Reef, that's what it is there for..."

Fixed the error, and now Windoze can resolv against the DNS too.

filex · 04-15-2006, 03:07 AM

Can you share more information about this?

I had the similar problem in my office