DNS on HPUX 11 is not resolve

[Tzvika Faibish_1]

I have HPUX 11 which is my DNS and Sendmail.
It resolve all the internal address with no problem. When I'm trying to login from outside line (out of the network) to our net all works fine but the DNS can't resolve the address for the clients (address like 10.0.0.2) since he dont have it. It slow all the remote connection. How can i resolve address like this one? is there away to tell the DNS not to wait so long?
Help is need.
Thanks,
Tzvika

[Steven E. Protter]

One of your dns servers in /etc/resolv.conf is obviously returning answers slowly.

This could be because the information is coming from a busy or slow or unpatched microsoft dns server. It could also be a firewall is interfering with dns resolution.

It would appear that when you connect in from the outside your VPN setup is not allowing the transfer of DNS information from inside your network.

This is a common issue that is usually to do with the VPN setup and or the setup of your internal DNS server. It may be set up to not allow resolution for the address range assigned to your vpn.

SEP

[Tzvika Faibish_1]

But nothing changed... I have the same DNS on HPUX and the same FW with no change. haoe can I configure the DNS not to wait so long maybe timeout param... I also check with patches and it's up2date.

[Vishwas Pai]

This is what man resolver says .. does this help ?


====

The values for retransmission timeout and number of retries to be attempted can be configured. These correspond to the retrans and retry fields in the _res structure. The following three options, listed in the order of precedence, have been provided for configuring the retransmission timeout and retry values.

1. Environment Variables,

2. Configuration file /etc/resolv.conf,

3. Through calls to API set_resfield().

retrans and retry can be configured through the Environmental
Variables RES_RETRANS and RES_RETRY as follows:

RES_RETRANS=values in milliseconds
RES_RETRY=number of retries

======

-vishwas

[Stf]

Hello,

could you give us your /etc/nsswitch.conf file please?

Stf ;-)

[Geoff Wild]

This is what I add to resolv.conf:

retrans 2500
retry 2

Rgds...Geoff

[Tzvika Faibish_1]

Dear All,
Thanks for your help.
here is the /etc/resolve
more /etc/resolv.conf
domain xx.mm.co.il
nameserver 199.203.xxx.xxx # Internal DNS
nameserver 212.150.48.169
nameserver 206.49.94.234
here is nsswich.conf
# more /etc/nsswitch.conf
#
# /etc/nsswitch.hp_defaults:
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# uses NIS (YP) in conjunction with files.
#

passwd: compat
group: compat
dns [NOTFOUND=continue] files
hosts: nis [NOTFOUND=continue] dns [NOTFOUND=continue] files
networks: nis [NOTFOUND=continue] files
protocols: nis [NOTFOUND=continue] files
rpc: nis [NOTFOUND=continue] files
publickey: nis [NOTFOUND=continue] files
netgroup: nis [NOTFOUND=continue] files
automount: files nis
aliases: files
files
services: nis [NOTFOUND=continue] files

Where should I change the param you guys mention?

[Geoff Wild]

Add:

retrans 2500
retry 2

To bottom of /etc/resolv.conf



Rgds...Geoff

[Geoff Wild]

Before you do that, time your dns:

timex nslookup www.hp.com

Then make the changes, and try that command again.

RGds...Geoff