named not answering "external" queries

[Mathias Körber]

>=20
> i  have named running with the "-q" option to log all incoming =
queries.
> and i can see the requests coming in to named and, from what i =
understand
> about the log messages, no errors appear to occur but a resonse is =
never
> sent to the DNS querier.

I see an answer being sent in the second last line in your log!

Do you have a firewall which might be blocking the replies?
Can you ping the source of the query (maybe the replies cannot get
routed to your friend's machine?)

I seem to have problems tracerouting to your nameserver:
$ /usr/sbin/traceroute 64.216.247.225
traceroute to 64.216.247.225 (64.216.247.225), 30 hops max, 40 byte =
packets
	[...]
13  sbc-dfw2-oc12.swbell.net (216.2.80.178)  44.730 ms  45.032 ms  =
44.737 ms
14  core2-vlan10.rcsntx.swbell.net (151.164.1.176)  45.060 ms  45.527 ms =
 45.232 ms
15  rback1-fa2-0.rcsntx.swbell.net (151.164.1.232)  49.032 ms  52.740 ms =
 51.267 ms
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *

This might be due to a firewall etc though..

btw: having both primary and secondary NS for a zone on the same
local LAN (most likely using the same network connection, powersupply =
etc)
is not a good idea. You miht want to ask your ISP (or someone else) to =
provide secondary
NS for your zone, so that it gets served even if your link or site =
should go down.

>=20
> Here are the log file entries from my named.run file for one of=20
> the queries=20
> that times out. If anybody sees a problem or can explain why the =
response
> never gets to querier if would greatly appreciate your help.
>=20
> Thanks in advance,
> Matt Wisner
>=20
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> datagram from [158.43.128.90].38049, fd 22, len 28
> ns_req(from [158.43.128.90].38049)
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3270
> ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;;      vi-ltd.com, type =3D MX, class =3D IN
> XX /158.43.128.90/vi-ltd.com/MX/IN
> req: nlookup(vi-ltd.com) id 3270 type=3D15 class=3D1
> req: found 'vi-ltd.com' as 'vi-ltd.com' (cname=3D0)
> wanted(0x4012a468, IN MX) [IN MX]
> wanted(0x40126038, IN MX) [IN NS]
> wanted(0x40126068, IN MX) [IN NS]
> wanted(0x4012d008, IN MX) [IN SOA]
> wantedtsig(0x4012a468, IN MX) [IN MX]
> wantedtsig(0x40126038, IN MX) [IN NS]
> wantedtsig(0x40126068, IN MX) [IN NS]
> wantedtsig(0x4012d008, IN MX) [IN SOA]
> make_rr(vi-ltd.com, 4012a468, bffff7cc, 472, 1) 22 zone 8 ttl 86400
> finddata: added 1 class 1 type 15 RRs
> req: foundname=3D1, count=3D1, founddata=3D1, cname=3D0
> findns: np 0x40120548 'vi-ltd'
> findns: SOA found
> req: leaving (vi-ltd.com, rcode 0)
> free_nsp: ns.vi-ltd.COM rcnt 1
> findns: np 0x40120548 'vi-ltd'
> findns: 2 NS's added for 'vi-ltd'
> make_rr(vi-ltd.com, 40126038, bffff7e5, 447, 1) 14 zone 8 ttl 86400
> make_rr(vi-ltd.com, 40126068, bffff7f6, 430, 1) 15 zone 8 ttl 86400
> free_nsp: ns.vi-ltd.com rcnt 1
> free_nsp: ns2.vi-ltd.com rcnt 1
> doaddinfo() addcount =3D 4
> do additional "mailhost.vi-ltd.com" (from "vi-ltd.com")
> found it
> make_rr(mailhost.vi-ltd.com, 40115710, bffff808, 412, 0) 4 zone 8=20
> ttl 86400
> addinfo: adding address data n =3D 16
> do additional "ns.vi-ltd.com" (from "vi-ltd.com")
> found it
> make_rr(ns.vi-ltd.com, 401156ec, bffff818, 396, 0) 4 zone 8 ttl 86400
> addinfo: adding address data n =3D 16
> do additional "ns2.vi-ltd.com" (from "vi-ltd.com")
> found it
> make_rr(ns2.vi-ltd.com, 40115734, bffff828, 380, 0) 4 zone 8 ttl 86400
> addinfo: adding address data n =3D 16
> do additional "vi-ltd.com" (from "vi-ltd.com")
> found it
> ns_req: answer -> [158.43.128.90].38049 fd=3D22 id=3D3270 size=3D136 =
rc=3D0
> pselect(24, 0xf00060, 0x0, 0x0, 2864.246876000)
>=20
>=20