Secondary DNS issues ...

[spectrumproduct]

Hope you guys can help ..

After some mucking around, I got master2slave to transfer the DNS from the DirectAdmin NS server to my NS2 server ..

Did some testing and it's working great ..

It wan't till later today i was outside the network that I realiased it wasn't working externally ..

I'm running CentOs5.1 on both boxes ..

Is there something obvious that restricts bind to it's local interfaces and not the WWW? ..

Thanks .. and sorry if this is an easy question I should have worked out by now .. all my other DNS installs have kinda just worked.

Brett

 

[nobaloney]

Is there something obvious that restricts bind to it's local interfaces and not the WWW? ..

That would be OS Distribution and installation specific. Look first to see if your firewall allows both TCP/IP and UDP traffic on port 53 in both directions.

If that's good, then check to see if your named.conf file restricts access to only certain IP#s.

Jeff

 

[floyd]

Also

netstat -npa | grep :53 | grep LISTEN

will show you all the ip's that named is listening on. If you add an ip without
restarted named then named will not be listening on that ip.

 

[spectrumproduct]

Thanks for the replys! ..

I think i've checked all that ..

If I make requests from another machine within the same /29 subnet .. it works fine .. but past that it just times out ..

I have opened 53 within the firewall .. and can telnet to 53 on the ns2 box ..

[root@ns2 ~]# netstat -npa | grep :53 | grep LISTEN
tcp 0 0 150.xxx.xxx.xx:53 0.0.0.0:* LISTEN 3068/named
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 3068/named

Can't seem to find any rescrictions ..

 

[pkilam]

you said

"If I make requests from another machine within the same /29 subnet .. it works fine .. but past that it just times out ..:

Is tcp/udp port 53 opened on your firewall for incoming connection only for machine on the same subnet or any machine on internet?

And, do you have other firewall in front of your server (ie. a standalone firewall) in addtion to your local iptable firewall?

I think nothing more others may be able to suggest you to check.
It will be better if you show your named.conf, your nameserver ip and iptables content. It is hard for others to guess the solutions to the problem within looking at the setup detail...and do some testing...

 

[spectrumproduct]

thanks for your replies guys ..

worked this one out ..

The Dell server this is installed on has two NICS.

1 - 100m
2 - 1gb

I am using the 1gb of course .. unfortunatelly CentOS put the 1gb as eth1 but all the packages where defaulting to eth0 ..

Explains why some things worked and some didn't ..

but thanks for your ideas .. at least i know I was reading the firewall configs corectly..