| View previous topic :: View next topic |
| Author |
Message |
geowapa
n00b
Joined: 08 Sep 2004
Posts: 50
|
 Posted: Sun Dec 05, 2004 6:34 pm Post subject: DNS returning NXDOMAIN for forwarded requests |
 |
|
Running:
net-dns/bind-tools-9.2.3-r1 *
net-dns/bind-9.2.2-r3 *
Bind at random intervals, very unpredictable, will return NXDOMAIN for all forwarded requests. A "rndc reload" or stop/start bind returns everything to normal for anywhere from a few minutes to a few hours, to a day or so.
When it is failing, for example I ping "www.ibm.com" from my laptop. In an Ethereal trace on the server:
- The server gets the DNS request from the client
- The server sends a request upstream to my ISP
- The ISP answers with a list of valid servers
- The server sends NXDOMAIN to the client.
The server clearly received a valid answer from the ISP, so I don't have a clue as to why it would then send NXDOMAIN to the client.
I'm running with debug level 5 and turned on query logging. Nothing yet points to why the problem occurs. On a whim, I just turned off the "delegation only" flag for .com and .net, but didn't think to try other domains prior to doing that. It will take a while to see if this effects the problem.
Any ideas? Anybody else seen this type of issue?
Thanks,
George |
|
| Back to top |
|
 |
converter
Apprentice
Joined: 24 Dec 2002
Posts: 163
|
| Posted: Fri Feb 25, 2005 6:48 pm Post subject: Re: DNS returning NXDOMAIN for forwarded requests |
|
|
| geowapa wrote: | Running:
net-dns/bind-tools-9.2.3-r1 *
net-dns/bind-9.2.2-r3 *
Bind at random intervals, very unpredictable, will return NXDOMAIN for all forwarded requests. A "rndc reload" or stop/start bind returns everything to normal for anywhere from a few minutes to a few hours, to a day or so.
Any ideas? Anybody else seen this type of issue?
|
I've just spent some time trying to troubleshoot the same symptoms on the same release of BIND 9. The delegation-only zones seem to be the trigger; removing the zones makes BIND work normally, turning them back on causes the (errant?) NXDOMAIN errors to return within a few minutes. Since this option isn't well documented yet, I wonder if this behavior is unexpected.
_________________
converter |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
