DNS server fails ( 1 )

[alman]

Thanks Roberto, it's a not new DNS server.It's already configured by a person who have left.It's BIND ver 8.2. The /var/named/mydomain.db files are all created. Basically the DNS server is an Internal DNS server means it should forward the request to an external DNS server. I have put the external DNS server's ip address as forwarder , but still the same result. in between this DNS servers there's PIX Firewall .
attch :below is the named.conf file.

[Kodjo Agbenu]

Hello,

In the global section, try to replace "forward only" by "forward first".

Good luck.

Kodjo

[alman]

Thanks for your reply, I have tried that also, but still the same , nslookup fails.
I've edited and stop and started the services , still the same

[Roberto_30]

Are your clients and server able to resolve FQDN of Internet Hosts ?

Did you check PIX server rules (remember port 53 for DNS).

Regards Roberto

[Kodjo Agbenu]

Hi,

From the DNS server, open a console and try the following :

root# nslookup
Note: nslookup is deprecated...
> server 202.132.2.3
Default server: 202.132.2.3
Address: 202.132.2.3#53
> www.suse.com


If it works, your DNS should work too. In your case, I guess it won't work.

Then check the following potential issues :

* Local linux Firewall (make sure ipchains and iptables are properly set to allow DNS traffic on at least UDP, possibly TCP also, from source port >1024 to destination port 53).

* PIX firewall : check the firewall logs to make sure that your DNS server is not being blocked by too restrictive rules.

* Routing : make sure your static routes are configured so that you can reach the forwarding DNS server 202.132.2.3

Good luck.

Kodjo

[alman]

Hi Kodjo when I did this

server 202.132.2.3
Default server: 202.132.2.3
Address: 202.132.2.3#53
> www.suse.com

it works , I mean my DNS server is able to resolve the queries.
I have checked on Firewall to check anything to deny DNS resolutions , but nothing like that .

IP chains , look's ok .no restrictions on DNS.

When I query from local host still cannot.
I have even tried using a WIN2K server to become DNS server , it works fine.It can resolve queries