nslookup not picking up hosts file entry if ipaddress not alive

[Alan Casey]

I am trying to resolve a host to a dummy ipaddress, but if I enter this dummy ip n the hosts file, nslookup will continue and resolve it by DNS even though its set to look at hosts first!

# more /etc/nsswitch.conf
passwd: files
group: files
hosts: files [NOTFOUND=continue] dns
networks: files
protocols: files
rpc: files
publickey: files
netgroup: files
automount: files
aliases: files
services: files

# more /etc/hosts
10.195.101.321 ieswthsrv102.axa-ie.intraxa ieswthsrv102

# nslookup ieswthsrv102
Using /etc/hosts on: iexiwqc

looking up FILES
Trying DNS
Name: ieswthsrv102.axa-ie.intraxa
Address: 10.195.99.68


HOWEVER If I change the ipaddress in the hosts file to one that is alive, although not the correct one, it resolves from the hosts file:
# more /etc/hosts
10.195.101.64 ieswthsrv102.axa-ie.intraxa ieswthsrv102

# nslookup ieswthsrv102
Using /etc/hosts on: iexiwqc

looking up FILES
Name: ieswthsrv102.axa-ie.intraxa
Address: 10.195.101.64
Aliases: ieswthsrv102


Any ideas why this is happening?

[Alan Casey]

ok I have already found the solution
I updated nsswitch.conf to show:

hosts: files [NOTFOUND=continue UNAVAIL=continue FOUND=return] dns

and this will resolve in the way I want it.
Should this not be default?
I dont understand why you would want to resolve to dns if its in the hosts file

[Alan Casey]

Well it looks like I spoke to soon, the host is now, with the nsswitch conf as above not using the hosts file for this lookup.
I rebooted and its still doing the wrong thing
hostfile:
10.195.101.321 ieswthsrv102.axa-ie.intraxa ieswthsrv102

# nslookup ieswthsrv102
Using /etc/hosts on: iexiwqc

looking up FILES
Trying DNS
Name: ieswthsrv102.axa-ie.intraxa
Address: 10.195.99.68


Any ideas whats wrong here?

[TTr · Accepted solution]

Maybe nslookup is too smart and when it sees the "321" in the IP (which is an invalid octant number) it refuses to give you that IP and continues on to DNS.

Check with a nonexistent host, nonexistent IP but valid IP number.

[Alan Casey]

thank you Ttr, I hadnt spotted that but it seems to have sorted it.
Mystery solved