Intermittent timeout problem

[Oli Comber]

Hi,
I hope this isn't seen as bad etiquette cross-posting this, but I'm sure
its a general bind configuration problem, not just Bind 9.

It could also be my firewall that's the problem - I'm currently using
the setup build into Suse9, though this will change to a self-rolled
configuration any day now.

Please, if anyone has any experience of this problem, I've got a very
sore forehead from the repeated hitting against my monitor :0(

Thanks,
-Oli


----------


-- Attached file included as plaintext by Ecartis --
-- Desc: Forwarded message - Intermittent timeout problem

Subject: Intermittent timeout problem
From: Oli Comber <oli at niceltowers.co.uk>
To: bind9-users at isc.org
Content-Type: text/plain
Message-Id: <1078411987.2217.49.camel at fish>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.4 
Date: Thu, 04 Mar 2004 14:53:07 +0000
Content-Transfer-Encoding: 7bit

Hi,

I've installed bind9 at home to be an authorative server for 5 machines
here, and forward all other queries to our external ISP's DNS server.

Querying the external DNS directly always works fine.  When I use the
internal one, it gives me problems after a while (<10 mins?)

I start Bind and surf around to check resolution, and it is fine. 
Speedy.

After a few minutes, things start to grind to a halt.  The client starts
timing out, though the server still finishes the query, and it is there
on the second attempt.  But even this deteriorates to around 1min at
worst.  The external DNS still works fine if connected to directly.

I started off using Bind 9.2.2, which shipped with SuSe9.  I've
yesterday built 9.2.3, but it didn't help.

I've pasted part of my config file below.  Please be gentle, I'm a
newbie :0)

Thanks in advance,
-Oli


options {
	directory "/var/lib/named";
	dump-file "/var/log/named_dump.db";
	statistics-file "/var/log/named.stats";

	notify no;
	forwarders {
		212.159.13.49;
		194.168.4.100;
		194.168.8.100;
		};
	listen-on-v6 { none; };
	recursion yes;
	forward first;

/*	auth-nxdomain yes;
	query-source address * port 53;
	listen-on  {192.168.1.9; };
	
*/
	
};
zone "." in {
	type hint;
	file "root.hint";
};
include "/etc/named.keys";
zone "niceltowers.co.uk" in {
	file "dyn/niceltowers.co.uk.zone";
	type master;
	allow-update { key DHCP_UPDATER; };
};
zone "1.168.192.in-addr.arpa" in {
	file "dyn/1.168.192.in-addr.arpa.zone";
	type master;
	allow-update { key DHCP_UPDATER; };
};