Problem with sakon.com.sg

[Khoo Boon Hing]

Hi,

One of our customer has this problem of getting connection timed out when
querying for records other that 'any' and 'soa' on host1.sakon.com.sg and
host2.sakon.com.sg :

% dig @host1.sakon.com.sg host1.sakon.com.sg a

; <<>> DiG 8.2 <<>> @host1.sakon.com.sg host1.sakon.com.sg a 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server host1.sakon.com.sg  203.116.235.67: Connection timed out


But when asking for 'and' or 'soa', it looks completely normal :

% dig @host1.sakon.com.sg sakon.com.sg soa

; <<>> DiG 8.2 <<>> @host1.sakon.com.sg sakon.com.sg soa 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;;      sakon.com.sg, type = SOA, class = IN

;; ANSWER SECTION:
sakon.com.sg.           1D IN SOA       host1.sakon.com.sg. root.host1.sakon.com.sg. (
                                        1999101419      ; serial
                                        3H              ; refresh
                                        1H              ; retry
                                        1W              ; expiry
                                        1D )            ; minimum


;; AUTHORITY SECTION:
sakon.com.sg.           1D IN NS        host1.sakon.com.sg.
sakon.com.sg.           1D IN NS        host2.sakon.com.sg.
sakon.com.sg.           1D IN NS        ss.nic.net.sg.

;; ADDITIONAL SECTION:
host1.sakon.com.sg.     1D IN A         203.116.235.67
host2.sakon.com.sg.     1D IN A         203.116.235.68
ss.nic.net.sg.          16h46m54s IN A  202.42.194.208

;; Total query time: 51 msec
;; FROM: ast.nic.net.sg to SERVER: host1.sakon.com.sg  203.116.235.67
;; WHEN: Tue Oct 19 20:19:44 1999
;; MSG SIZE  sent: 30  rcvd: 186


Asking for bind version, it's able to answer :

% dig @host1.sakon.com.sg version.bind chaos txt

; <<>> DiG 8.2 <<>> @host1.sakon.com.sg version.bind chaos txt 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      version.bind, type = TXT, class = CHAOS

;; ANSWER SECTION:
VERSION.BIND.           0S CHAOS TXT    "8.1.2-T3B"

;; Total query time: 37 msec
;; FROM: ast.nic.net.sg to SERVER: host1.sakon.com.sg  203.116.235.67
;; WHEN: Tue Oct 19 20:31:17 1999
;; MSG SIZE  sent: 30  rcvd: 64


There's no problem for the third name server ss.nic.net.sg.


Any idea what could be wrong ? The two servers are behind firewall, but only
certain types of dns query get timed out. Please help.

Thanks in advance.

bh khoo