Chris Cera on 30 Oct 2005 23:10:17 -0000 |
> [...] Wow .... so the problem is with my caching DNS server ... not so OT anymore either :-D I have never had a problem (I think) with any other domain, and this server has been in place for months. Does anybody have a clue why phila.gov would be a problem for my server? I'm using bind 9.2.5. My server fails: $ dig brtweb.phila.gov @127.0.0.1 ; <<>> DiG 9.2.5 <<>> brtweb.phila.gov @127.0.0.1 ; (1 server found) ;; global options: printcmd ;; connection timed out; no servers could be reached Here is a trace: $ dig +trace +additional phila.gov @127.0.0.1 ; <<>> DiG 9.2.5 <<>> +trace +additional phila.gov @127.0.0.1 ; (1 server found) ;; global options: printcmd . 187144 IN NS F.ROOT-SERVERS.NET. . 187144 IN NS G.ROOT-SERVERS.NET. . 187144 IN NS H.ROOT-SERVERS.NET. . 187144 IN NS I.ROOT-SERVERS.NET. . 187144 IN NS J.ROOT-SERVERS.NET. . 187144 IN NS K.ROOT-SERVERS.NET. . 187144 IN NS L.ROOT-SERVERS.NET. . 187144 IN NS M.ROOT-SERVERS.NET. . 187144 IN NS A.ROOT-SERVERS.NET. . 187144 IN NS B.ROOT-SERVERS.NET. . 187144 IN NS C.ROOT-SERVERS.NET. . 187144 IN NS D.ROOT-SERVERS.NET. . 187144 IN NS E.ROOT-SERVERS.NET. M.ROOT-SERVERS.NET. 604653 IN A 202.12.27.33 ;; Received 244 bytes from 127.0.0.1#53(127.0.0.1) in 1 ms gov. 172800 IN NS E.GOV.ZONEEDIT.COM. gov. 172800 IN NS F.GOV.ZONEEDIT.COM. gov. 172800 IN NS G.GOV.ZONEEDIT.COM. gov. 172800 IN NS A.GOV.ZONEEDIT.COM. gov. 172800 IN NS B.GOV.ZONEEDIT.COM. gov. 172800 IN NS C.GOV.ZONEEDIT.COM. gov. 172800 IN NS D.GOV.ZONEEDIT.COM. A.GOV.ZONEEDIT.COM. 172800 IN A 216.55.155.29 B.GOV.ZONEEDIT.COM. 172800 IN A 206.51.224.229 C.GOV.ZONEEDIT.COM. 172800 IN A 69.72.142.35 D.GOV.ZONEEDIT.COM. 172800 IN A 209.97.207.48 E.GOV.ZONEEDIT.COM. 172800 IN A 82.165.40.134 F.GOV.ZONEEDIT.COM. 172800 IN A 66.197.185.229 G.GOV.ZONEEDIT.COM. 172800 IN A 66.135.32.100 ;; Received 267 bytes from 192.5.5.241#53(F.ROOT-SERVERS.NET) in 93 ms phila.gov. 86400 IN NS DNS.phila.gov. phila.gov. 86400 IN NS DNS2.phila.gov. DNS.phila.gov. 86400 IN A 170.115.249.10 DNS2.phila.gov. 86400 IN A 170.115.249.11 ;; Received 96 bytes from 82.165.40.134#53(E.GOV.ZONEEDIT.COM) in 168 ms ;; Received 27 bytes from 170.115.249.10#53(DNS.phila.gov) in 0 ms Passing in the real IP number of their dns server gives me the correct result: $ dig +norec +noques +nostats +nocmd brtweb.phila.gov @170.115.249.10 ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 31400 ;; flags: qr aa ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; ANSWER SECTION: brtweb.phila.gov. 86400 IN A 170.115.249.40 ;; AUTHORITY SECTION: phila.gov. 86400 IN NS dns2.phila.gov. phila.gov. 86400 IN NS dns.phila.gov. ;; ADDITIONAL SECTION: dns2.phila.gov. 86400 IN A 170.115.249.11 dns.phila.gov. 86400 IN A 170.115.249.10 Is this what my caching dns server attempts to ask for?: $ dig +norec +noques +nostats +nocmd brtweb.phila.gov @dns.phila.gov dig: couldn't get address for 'dns.phila.gov': failure Could this be my problem? $ whois phila.gov Timeout. Any help is appreciated, thanks. -- Chris Cera http://cera.us ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|