why isn't the DNS server working?

[Mark_Andrews at isc.org]

> 
> why isn't the DNS server working?
> 
> On a redhat 7.3 linux server, I set up a DNS server (following
> instructions from linux.how-to).
> I registered a domain,
> say "mydomain.com". I got a static IP, say "67.48.25.88" from a DSL
> provider.
> So I run a webserver and a DNS server on the same linux box. I set up
> a "A" record
> for "www.mydomain.com" in the zone file and registered
> "ns.mydomain.com" as my
> domain's primary name server. I can ping "ns.mydomain.com" and get
> response
> "67.48.25.88" from the internet. But I cannot "nslookup
> www.mydomain.com ns.mydomain.com".
> It seems that the DNS lookup fails from outside my network. But on the
> linux server,
> it seems to be working. I can "dig any www.mydomain.com" or "nslookup
> www.mydomain.com ns.mydomain.com".
> 
> I user dhcp.
> 
> Can anyone tell me what have gone wrong? Thanks very much!

	My bet would be a firewall but since you refuse to give real
	details who can tell.

	Mark

> 
> Here are the zone files:
> 
> named.conf:
> 
> options {
>   directory "/var/named";
>   forward first;
>   forwarders {
> 	216.227.80.36;
> 	216.227.64.36;
> 	};
>   };
> 
> controls {
> 	inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
> };
> 
> key "rndc_key" {
> 	algorithm hmac-md5;
> 	secret 
> "c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K";
> };
> 
> zone "." {
> 	type hint;
> 	file "root.hints";
> };
> 
> zone "0.0.127.in-addr.arpa" {
>   type master;
>   file "pz/127.0.0";
>   };
> 
> zone "mydomain.com" {
>   type master;
>   file "pz/mydomain.com";
> };
> 
> zone "25.48.67.in-addr.arpa" {
>   type master;
>   file "pz/67.48.25";
> };
> 
> 
> pz/mydomain.com:
> 
> $TTL 3D
> @	IN	SOA	ns.mydomain.com.  sarah.mydomain.com. (
> 			2002102600	; Serial
> 			7200		; Refresh - 2 hours
> 			3600		; Retry   - 1 hour
> 			43200		; Expire  - 12 hours
> 			3600 )		; Minimum - 1 hour
> 
> 	IN	NS	ns.mydomain.com.
> 	IN	MX	10 mail.mydomain.com.			
> 
> localhost	A	127.0.0.1
> ns		A	67.48.25.88
> www		A	67.48.25.88
> mail		CNAME	ns
> 
> pz/127.0.0:
> 
> $TTL 3D
> @	IN	SOA	ns.mydomain.com.  root.localhost. (
> 			2002102600	; Serial
> 			7200		; Refresh - 2 hours
> 			3600		; Retry   - 1 hour
> 			43200		; Expire  - 12 hours
> 			3600 )		; Minimum - 1 hour
> 
> 	IN	NS	ns.mydomain.com.
> 1	IN	PTR	localhost.
> 
> 
> pz/67.85.25:
> 
> $TTL 3D
> @	IN	SOA	ns.mydomain.com.  sarah.mydomain.com. (
> 			2002102600	; Serial
> 			7200		; Refresh - 2 hours
> 			3600		; Retry   - 1 hour
> 			43200		; Expire  - 12 hours
> 			3600 )		; Minimum - 1 hour
> 
> 	IN	NS	ns.mydomain.com.
> 
> 85	IN	PTR	ns.mydomain.com.
> 
> 
> /etc/resolv.conf:
> 
> search mydomain.com
> nameserver 127.0.0.1
> 
> output of "dig any www.mydomain.com" from the server itself:
> 
> 
> ; <<>> DiG 9.2.0 <<>> any www.mydomain.com
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60066
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL:
> 1
> 
> ;; QUESTION SECTION:
> ;www.mydomain.com.		IN	ANY
> 
> ;; ANSWER SECTION:
> www.mydomain.com.	259200	IN	A	67.48.25.88
> 
> ;; AUTHORITY SECTION:
> mydomain.com.	259200	IN	NS	ns.mydomain.com.
> 
> ;; ADDITIONAL SECTION:
> ns.mydomain.com.	259200	IN	A	67.48.25.88
> 
> ;; Query time: 1 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sat Nov  9 20:30:27 2002
> ;; MSG SIZE  rcvd: 88
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org