topic DNS server fails ( 1 ) in Operating System - Linux

DNS server fails ( 1 )

alman — Sun, 20 Oct 2002 14:15:41 GMT

Thanks Roberto, it's a not new DNS server.It's already configured by a person who have left.It's BIND ver 8.2. The /var/named/mydomain.db files are all created. Basically the DNS server is an Internal DNS server means it should forward the request to an external DNS server. I have put the external DNS server's ip address as forwarder , but still the same result. in between this DNS servers there's PIX Firewall .
attch :below is the named.conf file.

Re: DNS server fails ( 1 )

Kodjo Agbenu — Sun, 20 Oct 2002 20:53:17 GMT

Hello,

In the global section, try to replace "forward only" by "forward first".

Good luck.

Kodjo

Re: DNS server fails ( 1 )

alman — Sun, 20 Oct 2002 22:16:11 GMT

Thanks for your reply, I have tried that also, but still the same , nslookup fails.
I've edited and stop and started the services , still the same

Re: DNS server fails ( 1 )

Roberto_30 — Mon, 21 Oct 2002 11:52:21 GMT

Are your clients and server able to resolve FQDN of Internet Hosts ?

Did you check PIX server rules (remember port 53 for DNS).

Regards Roberto

Re: DNS server fails ( 1 )

Kodjo Agbenu — Mon, 21 Oct 2002 18:24:26 GMT

Hi,

From the DNS server, open a console and try the following :

root# nslookup
Note: nslookup is deprecated...
> server 202.132.2.3
Default server: 202.132.2.3
Address: 202.132.2.3#53
> www.suse.com

If it works, your DNS should work too. In your case, I guess it won't work.

Then check the following potential issues :

* Local linux Firewall (make sure ipchains and iptables are properly set to allow DNS traffic on at least UDP, possibly TCP also, from source port >1024 to destination port 53).

* PIX firewall : check the firewall logs to make sure that your DNS server is not being blocked by too restrictive rules.

* Routing : make sure your static routes are configured so that you can reach the forwarding DNS server 202.132.2.3

Good luck.

Kodjo

Re: DNS server fails ( 1 )

alman — Wed, 23 Oct 2002 11:42:41 GMT

Hi Kodjo when I did this

server 202.132.2.3
Default server: 202.132.2.3
Address: 202.132.2.3#53
> www.suse.com

it works , I mean my DNS server is able to resolve the queries.
I have checked on Firewall to check anything to deny DNS resolutions , but nothing like that .

IP chains , look's ok .no restrictions on DNS.

When I query from local host still cannot.
I have even tried using a WIN2K server to become DNS server , it works fine.It can resolve queries