Problems with DNS behind firewall.

Brad Knowles brad.knowles at skynet.be
Mon Jun 4 20:22:07 UTC 2001


At 3:23 PM -0700 6/4/01, robert cerulli wrote:

>  [root at copernicus /root]# nslookup
>  *** Can't find server name for address 1.1.1.213: No response from server
>  *** Can't find server name for address 1.1.1.212: Non-existent host/domain
>  *** Default servers are not available
>  [root at copernicus /root]#

	When you're trying to debug resolution problems, nslookup is a 
really poor tool to use, among other things because of precisely the 
behaviour demonstrated here.  I suggest you use "dig" instead. 
Assuming you installed your own copy of BIND, it should have been 
installed along with nslookup, and you should be able to type "man 
dig" to get more information.

	I would also suggest that you look into using tools like "doc" 
and "dnswalk" to try to help you further debug your problems.  The 
latest version of doc is available from 
<ftp://ftp.shub-internet.org/pub/shub/brad/dns/> (the 2.1 versions 
are for BIND 8, the 2.2 versions are for BIND 9), and you can get 
dnswalk from SourceForge (see 
<http://sourceforge.net/projects/dnswalk/>).


	Finally, please don't use "NOSPAM" garbage in your return 
address.  The newsgroup you posted this message to is gatewayed to a 
mailing list, and having this garbage in your address is anti-social 
and makes it more difficult for people to reply to you with the kind 
of information you've requested.

	Moreover, all address scanning tools I know of are intelligent 
enough to remove all "NOSPAM" type tags I've ever seen, so it doesn't 
do any good anyway.

-- 
Brad Knowles, <brad.knowles at skynet.be>

/*        efdtt.c  Author:  Charles M. Hannum <root at ihack.net>          */
/*       Represented as 1045 digit prime number by Phil Carmody         */
/*     Prime as DNS cname chain by Roy Arends and Walter Belgers        */
/*                                                                      */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob        */
/*   where title-key = "153 2 8 105 225" or other similar 5-byte key    */

dig decss.friet.org|perl -ne'if(/^x/){s/[x.]//g;print pack(H124,$_)}'


More information about the bind-users mailing list