Slave Servers Return SERVFAIL

[Justin T Pryzby]

On Tue, Nov 18, 2008 at 07:09:59AM -0500, Davenport, Steve M wrote:

> On an external server dig gives:
>  
> $ dig @harley.mc.utmck.edu -x 165.6.6.27
> ;; connection timed out; no servers could be reached

> Internally the same query is fine:
> 
> The config file has "allow query" set on the reverse zone. This was
> working earlier and I'm told there have been no network changes.
Can you run netstat -l and see if it's listening on the
external interface address?

> Does this appear to be a firewall issue? Is there anything else that
> might help narrow down the problem?
Maybe due to a firewall.  Can you telnet to port 53 from the outside?
tcp has to be allowed for the case of a truncated udp response anyway;
you'll have to check UDP too, perhaps using netcat (as root, after
stopping bind).

Justin