Cannot find additional hosts

[Mark_Andrews at isc.org]

> 
> How about this..
> 
> I have bind version 8.3.4 running on computer running Mac OS X Server.  
> This computer also has a firewall on it and I have opened the DNS port. 
>   If I ping from internal hosts I can see all the hosts listed in the 
> "davidcittadini.com" zone.  However, if I ping via another computer on 
> the Internet all I can see is "gateway.davidcittadini.com" and not the 
> other hosts listed in the zone, such as "ftp.davidcittadini.com" or 
> "www.davidcittadini.com".  How can I fix this problem?  Attached are 
> the relevant files.

	Well your DNS server is not responding to DNS requests.  I would
	be looking at your firewall settings.

	The reason gateway.davidcittadini.com is that gtld servers are
	responding with the glue record.

	Mark

drugs# tcpdump -i ep0 -n -p host 144.132.0.86 or icmp
tcpdump: listening on ep0
20:12:41.770070 130.155.191.236.2766 > 144.132.0.86.53:  6521 A? gateway.davidcittadini.com. (44)
20:12:49.765144 130.155.191.236.3213 > 144.132.0.86.53:  22745 A? davidcittadini.com. (36)
20:12:54.771127 130.155.191.236.3213 > 144.132.0.86.53:  22745 A? davidcittadini.com. (36)
20:13:05.929290 130.155.191.236 > 144.132.0.86: icmp: echo request
20:13:06.127529 144.132.0.86 > 130.155.191.236: icmp: echo reply
20:13:06.942018 130.155.191.236 > 144.132.0.86: icmp: echo request
20:13:07.132003 144.132.0.86 > 130.155.191.236: icmp: echo reply
20:13:07.952076 130.155.191.236 > 144.132.0.86: icmp: echo request
20:13:08.131162 144.132.0.86 > 130.155.191.236: icmp: echo reply
^C
361 packets received by filter
0 packets dropped by kernel
drugs# 

> 
> named.conf
> =========
> options {
>            directory "/var/named";
> 
>            listen-on port 53 {
>                    144.132.0.86;
>            };
> 
>            cleaning-interval 360;
> 
>            recursion no;
> };
> 
> // Root
> zone "." {
>            type hint;
>            file "root.hints.db";
> };
> 
> // davidcittadini.com zone
> zone "davidcittadini.com" {
>            type master;
>            notify yes;
>            file "davidcittadini.com";
>            allow-transfer {
>                    64.40.0.244/32;
>            };
> 	allow-query {
> 		any;
> 	};
> };
> 
> // Reverse zone
> zone "86.0.132.144.in-addr.arpa" {
>            type master;
>            notify yes;
>            file "86.0.132.144";
>            allow-transfer {
>                    64.40.0.244/32;
>            };
> 	allow-query {
> 		any;
> 	};
> };
> 
> davidcittadini.com zone file
> =====================
> $TTL    86400
> @       IN      SOA     gateway.davidcittadini.com. 
> hostmaster.davidcittadini.com. (
>                                    2003013000      ; serial, todays date 
> + todays serial #
>                                    8H              ; refresh, seconds
>                                    2H              ; retry, seconds
>                                    1W              ; expire, seconds
>                                    1D )            ; minimum, seconds
> 
>                   NS      gateway.davidcittadini.com.   ; Address of 
> name server
>                   NS      ns1.siteleader.com.                  ; Address 
> of backup server
> 
>                   MX   10 mail.davidcittadini.com.       ; Primary Mail 
> Exchanger
> 
> 
> gateway         86400   A       144.132.0.86
> 
> mail            86400   A       144.132.0.86
> 
> ftp             86400   CNAME   gateway
> 
> ns              86400   CNAME   gateway
> 
> www             86400   CNAME   gateway
> 
> 86.0.132.144 reverse file
> ===================
> $TTL    86400
> @       IN      SOA     gateway.davidcittadini.com. 
> hostmaster.davidcittadini.com. (
>                        2003013000      ; serial, todays date + todays 
> serial #
>                            8H      ; Refresh
>                            2H      ; Retry
>                            1W      ; Expire
>                            1D)     ; Minimum TTL
> 
>                        NS      gateway.davidcittadini.com.    ; Address 
> of name server
>                        NS      ns1.siteleader.com.                   ; 
> Address of backup server
> 
> 86.0.132.144.in-addr.arpa. IN PTR     gateway.davidcittadini.com.
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org