Cannot find additional hosts

[Mark_Andrews at isc.org]

	NS9.WORLDNIC.COM's IP address is 216.168.225.139.  You may want
	to adjust your allow-transfer acl.

	Mark
 
> Oh.  I changed around the firewall and now it works :-).
> 
> Thank you for your help.
> David.
> 
> On Sunday, February 2, 2003, at 08:19  PM, Mark_Andrews at isc.org wrote:
> 
> >
> >>
> >> How about this..
> >>
> >> I have bind version 8.3.4 running on computer running Mac OS X Server.
> >> This computer also has a firewall on it and I have opened the DNS 
> >> port.
> >>   If I ping from internal hosts I can see all the hosts listed in the
> >> "davidcittadini.com" zone.  However, if I ping via another computer on
> >> the Internet all I can see is "gateway.davidcittadini.com" and not the
> >> other hosts listed in the zone, such as "ftp.davidcittadini.com" or
> >> "www.davidcittadini.com".  How can I fix this problem?  Attached are
> >> the relevant files.
> >
> > 	Well your DNS server is not responding to DNS requests.  I would
> > 	be looking at your firewall settings.
> >
> > 	The reason gateway.davidcittadini.com is that gtld servers are
> > 	responding with the glue record.
> >
> > 	Mark
> >
> > drugs# tcpdump -i ep0 -n -p host 144.132.0.86 or icmp
> > tcpdump: listening on ep0
> > 20:12:41.770070 130.155.191.236.2766 > 144.132.0.86.53:  6521 A? 
> > gateway.davidcittadini.com. (44)
> > 20:12:49.765144 130.155.191.236.3213 > 144.132.0.86.53:  22745 A? 
> > davidcittadini.com. (36)
> > 20:12:54.771127 130.155.191.236.3213 > 144.132.0.86.53:  22745 A? 
> > davidcittadini.com. (36)
> > 20:13:05.929290 130.155.191.236 > 144.132.0.86: icmp: echo request
> > 20:13:06.127529 144.132.0.86 > 130.155.191.236: icmp: echo reply
> > 20:13:06.942018 130.155.191.236 > 144.132.0.86: icmp: echo request
> > 20:13:07.132003 144.132.0.86 > 130.155.191.236: icmp: echo reply
> > 20:13:07.952076 130.155.191.236 > 144.132.0.86: icmp: echo request
> > 20:13:08.131162 144.132.0.86 > 130.155.191.236: icmp: echo reply
> > ^C
> > 361 packets received by filter
> > 0 packets dropped by kernel
> > drugs#
> >
> >>
> >> named.conf
> >> =========
> >> options {
> >>            directory "/var/named";
> >>
> >>            listen-on port 53 {
> >>                    144.132.0.86;
> >>            };
> >>
> >>            cleaning-interval 360;
> >>
> >>            recursion no;
> >> };
> >>
> >> // Root
> >> zone "." {
> >>            type hint;
> >>            file "root.hints.db";
> >> };
> >>
> >> // davidcittadini.com zone
> >> zone "davidcittadini.com" {
> >>            type master;
> >>            notify yes;
> >>            file "davidcittadini.com";
> >>            allow-transfer {
> >>                    64.40.0.244/32;
> >>            };
> >> 	allow-query {
> >> 		any;
> >> 	};
> >> };
> >>
> >> // Reverse zone
> >> zone "86.0.132.144.in-addr.arpa" {
> >>            type master;
> >>            notify yes;
> >>            file "86.0.132.144";
> >>            allow-transfer {
> >>                    64.40.0.244/32;
> >>            };
> >> 	allow-query {
> >> 		any;
> >> 	};
> >> };
> >>
> >> davidcittadini.com zone file
> >> =====================
> >> $TTL    86400
> >> @       IN      SOA     gateway.davidcittadini.com.
> >> hostmaster.davidcittadini.com. (
> >>                                    2003013000      ; serial, todays 
> >> date
> >> + todays serial #
> >>                                    8H              ; refresh, seconds
> >>                                    2H              ; retry, seconds
> >>                                    1W              ; expire, seconds
> >>                                    1D )            ; minimum, seconds
> >>
> >>                   NS      gateway.davidcittadini.com.   ; Address of
> >> name server
> >>                   NS      ns1.siteleader.com.                  ; 
> >> Address
> >> of backup server
> >>
> >>                   MX   10 mail.davidcittadini.com.       ; Primary 
> >> Mail
> >> Exchanger
> >>
> >>
> >> gateway         86400   A       144.132.0.86
> >>
> >> mail            86400   A       144.132.0.86
> >>
> >> ftp             86400   CNAME   gateway
> >>
> >> ns              86400   CNAME   gateway
> >>
> >> www             86400   CNAME   gateway
> >>
> >> 86.0.132.144 reverse file
> >> ===================
> >> $TTL    86400
> >> @       IN      SOA     gateway.davidcittadini.com.
> >> hostmaster.davidcittadini.com. (
> >>                        2003013000      ; serial, todays date + todays
> >> serial #
> >>                            8H      ; Refresh
> >>                            2H      ; Retry
> >>                            1W      ; Expire
> >>                            1D)     ; Minimum TTL
> >>
> >>                        NS      gateway.davidcittadini.com.    ; 
> >> Address
> >> of name server
> >>                        NS      ns1.siteleader.com.                   ;
> >> Address of backup server
> >>
> >> 86.0.132.144.in-addr.arpa. IN PTR     gateway.davidcittadini.com.
> >>
> >>
> > --
> > Mark Andrews, Internet Software Consortium
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org
> >
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org