Caching only nameserver fails to resolve external zones periodically
Curtis Rempel
curtis at telus.net
Mon May 17 23:04:04 UTC 2004
On Mon, 17 May 2004 23:21:34 +0100, Jim Reid wrote:
>>>>>> "Curtis" == Curtis Rempel <curtis at telus.net> writes:
>
> Curtis> Hi, I've got a caching name server which also handles a
> Curtis> zone (.lan) on an internal 192.168.1.0/24 network. Both
> Curtis> internal and external lookups work fine as I have a
> Curtis> forwarder entry defined in
> Curtis> /var/named/chroot/etc/named.conf
>
> Sigh. Too bad you didn't provide this file. We don't care about its
> pathname. The contents of the file would have been helpful.
My apologies. Here it is:
// generated by named-bootconf.pl
options {
directory "/var/named";
forwarders {
64.59.135.133;
};
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
controls {
inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};
zone "." IN {
type hint;
file "named.ca";
};
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
zone "lan" {
type master;
file "lan";
};
zone "1.168.192.in-addr.arpa" {
type master;
file "lan.rev";
};
include "/etc/rndc.key";
>
> Curtis> That is, until "something" happens which causes the
> Curtis> external lookups to fail. The internal zone resolution
> Curtis> still works, however, it seems as far as I can tell, that
> Curtis> the forwarder entry does not respond and then it starts
> Curtis> crawling through the root name servers and eventually
> Curtis> gives up.
>
> Get rid of the forwarding crap. Make your name server resolve
> everything for itself instead of sending queries to some other server
> that might be dead or unreachable from time to time. The "something"
> that is happening will probably be an outage of the server(s) you're
> forwarding queries to -- or maybe some transient routing problem --
> and you presumably have no control over that. Welcome to the hell that
> is a forwarding DNS configuration.....
>
> A DNS setup that relies on forwarding is pretty much always broken.
> In principle, forwarding is pointless, stupid and broken. Don't use
> it unless there is no alternative. Which there almost always is...
>
> What is probably going wrong is your (idiot) server is forwarding
> queries for non-local names to some other name server. When that
> doesn't respond, your server then tries to resolve the names for
> itself. Which it could have done all along.... Ho-hum. But these
> attempts fail. The tcpdump trace you supplied showed the queries being
> sent but no replies coming back. Presumably this traffic will be
> getting blocked by a firewall that's been configured to support this
> forwarding idiocy. ie Your name server isn't allowed to get answers
> from external name servers or else is prevented from sending queries
> to them. However the server that it forwards to isn't blocked like
> this. Sigh.
This tells me that since it does work periodically, the firewall config on
my end must be ok, otherwise it shouldn't work at all.
>
> Note too that by eliminating forwarding you (a) considerably simplify
> the management of both name servers; (b) eliminate an unnecessary single
> point of failure; (c) reduce the number of components (and therefore the
> number of failure modes) in your resolving chain; (d) make
> troubleshooting DNS problems much easier; (e) avoid creating
> dependencies on other servers that may not be aware you're dependent on
> them.
If I remove the forwarders entry, my 'host www.telus.net' (or any other
external zone for that matter) looks like this (and I get a 'no servers
could be reached' again):
[root at vault root]# tcpdump dst port 53
tcpdump: listening on eth0
16:54:24.966537 vault.lan.33335 > 202.12.27.33.domain: 55877 A? www.telus.net. (31) (DF)
16:54:24.966634 vault.lan.33335 > 202.12.27.33.domain: 63320 NS? . (17) (DF)
16:54:24.987430 vault.lan.33335 > 192.203.230.10.domain: 64953 [1au] PTR? 33.27.12.202.in-addr.arpa. (54) (DF)
16:54:26.406284 vault.lan.33335 > 128.8.10.90.domain: 24332 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:26.986185 vault.lan.33335 > 128.9.0.107.domain: 38886 A? www.telus.net. (31) (DF)
16:54:26.986279 vault.lan.33335 > 128.9.0.107.domain: 19443 NS? . (17) (DF)
16:54:27.006144 vault.lan.33335 > 192.5.5.241.domain: 57309 [1au] PTR? 33.27.12.202.in-addr.arpa. (54) (DF)
16:54:28.425936 vault.lan.33335 > 192.36.148.17.domain: 51477 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:29.005818 vault.lan.33335 > 192.33.4.12.domain: 28006 A? www.telus.net. (31) (DF)
16:54:29.005907 vault.lan.33335 > 192.33.4.12.domain: 14003 NS? . (17) (DF)
16:54:29.025833 vault.lan.33335 > 192.112.36.4.domain: 31932 [1au] PTR? 33.27.12.202.in-addr.arpa. (54) (DF)
16:54:30.445572 vault.lan.33335 > 128.9.0.107.domain: 48734 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:31.025458 vault.lan.33335 > 128.8.10.90.domain: 12243 A? www.telus.net. (31) (DF)
16:54:31.025549 vault.lan.33335 > 128.8.10.90.domain: 48289 NS? . (17) (DF)
16:54:31.045447 vault.lan.33335 > 198.41.0.4.domain: 54419 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:32.465212 vault.lan.33335 > 193.0.14.129.domain: 35032 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:33.045095 vault.lan.33335 > 192.36.148.17.domain: 50284 A? www.telus.net. (31) (DF)
16:54:33.045188 vault.lan.33335 > 192.36.148.17.domain: 61758 NS? . (17) (DF)
16:54:33.065077 vault.lan.33335 > 128.63.2.53.domain: 30879 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:34.485009 vault.lan.33335 > 192.203.230.10.domain: 26605 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:35.006376 vault.lan.33335 > 192.203.230.10.domain: 58738 [1au] PTR? 10.230.203.192.in-addr.arpa. (56) (DF)
16:54:35.064730 vault.lan.33335 > 193.0.14.129.domain: 31000 A? www.telus.net. (31) (DF)
16:54:35.064833 vault.lan.33335 > 193.0.14.129.domain: 24105 NS? . (17) (DF)
16:54:35.084699 vault.lan.33335 > 192.58.128.30.domain: 5865 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:36.504486 vault.lan.33335 > 192.5.5.241.domain: 17739 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:37.024402 vault.lan.33335 > 192.5.5.241.domain: 33453 [1au] PTR? 10.230.203.192.in-addr.arpa. (56) (DF)
16:54:37.084513 vault.lan.33335 > 192.203.230.10.domain: 59667 A? www.telus.net. (31) (DF)
16:54:37.084799 vault.lan.33335 > 192.203.230.10.domain: 45074 NS? . (17) (DF)
16:54:37.104330 vault.lan.33335 > 198.32.64.12.domain: 11328 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:38.524130 vault.lan.33335 > 192.112.36.4.domain: 19327 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:39.044048 vault.lan.33335 > 192.112.36.4.domain: 47286 [1au] PTR? 10.230.203.192.in-addr.arpa. (56) (DF)
16:54:39.124025 vault.lan.33335 > 202.12.27.33.domain: 56411 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:40.543789 vault.lan.33335 > 198.41.0.4.domain: 62675 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:41.063662 vault.lan.33335 > 198.41.0.4.domain: 7129 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:41.143668 vault.lan.33335 > 128.9.0.107.domain: 21905 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:42.563418 vault.lan.33335 > 128.63.2.53.domain: 7319 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:43.083328 vault.lan.33335 > 128.63.2.53.domain: 10946 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:43.163263 vault.lan.33335 > 192.33.4.12.domain: 19134 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:44.583063 vault.lan.33335 > 192.58.128.30.domain: 37611 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:45.023702 vault.lan.33335 > 192.203.230.10.domain: 35848 [1au] PTR? 90.10.8.128.in-addr.arpa. (53) (DF)
16:54:45.102989 vault.lan.33335 > 192.58.128.30.domain: 17924 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:45.103080 vault.lan.33335 > 192.5.5.241.domain: 20974 A? www.telus.net. (31) (DF)
16:54:45.103172 vault.lan.33335 > 192.5.5.241.domain: 54389 NS? . (17) (DF)
16:54:45.182928 vault.lan.33335 > 128.8.10.90.domain: 12525 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:46.602704 vault.lan.33335 > 198.32.64.12.domain: 44689 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:47.042628 vault.lan.33335 > 192.5.5.241.domain: 34394 [1au] PTR? 90.10.8.128.in-addr.arpa. (53) (DF)
16:54:47.122580 vault.lan.33335 > 198.32.64.12.domain: 17197 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:47.202564 vault.lan.33335 > 192.36.148.17.domain: 35518 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:48.622348 vault.lan.33335 > 202.12.27.33.domain: 17759 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:49.062280 vault.lan.33335 > 192.112.36.4.domain: 29822 [1au] PTR? 90.10.8.128.in-addr.arpa. (53) (DF)
16:54:49.142209 vault.lan.33335 > 202.12.27.33.domain: 56593 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:49.222209 vault.lan.33335 > 193.0.14.129.domain: 43602 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:50.642016 vault.lan.33335 > 128.9.0.107.domain: 43674 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:51.081914 vault.lan.33335 > 198.41.0.4.domain: 54605 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:54:51.161852 vault.lan.33335 > 128.9.0.107.domain: 22721 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:51.242031 vault.lan.33335 > 192.203.230.10.domain: 64238 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:52.661634 vault.lan.33335 > 192.33.4.12.domain: 32119 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:53.101535 vault.lan.33335 > 128.63.2.53.domain: 17883 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:54:53.121504 vault.lan.33335 > 192.112.36.4.domain: 7282 A? www.telus.net. (31) (DF)
16:54:53.121581 vault.lan.33335 > 192.112.36.4.domain: 18264 NS? . (17) (DF)
16:54:53.181516 vault.lan.33335 > 192.33.4.12.domain: 9132 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:53.261478 vault.lan.33335 > 192.5.5.241.domain: 4566 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:54.681310 vault.lan.33335 > 128.8.10.90.domain: 33841 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:55.041982 vault.lan.33335 > 192.203.230.10.domain: 7190 [1au] PTR? 107.0.9.128.in-addr.arpa. (53) (DF)
16:54:55.121198 vault.lan.33335 > 192.58.128.30.domain: 1803 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:54:55.201157 vault.lan.33335 > 128.8.10.90.domain: 48728 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:55.281138 vault.lan.33335 > 192.112.36.4.domain: 24364 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:56.700917 vault.lan.33335 > 192.36.148.17.domain: 55204 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:57.060841 vault.lan.33335 > 192.5.5.241.domain: 62924 [1au] PTR? 107.0.9.128.in-addr.arpa. (53) (DF)
16:54:57.140843 vault.lan.33335 > 198.32.64.12.domain: 64230 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:54:57.220799 vault.lan.33335 > 192.36.148.17.domain: 65207 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:57.300763 vault.lan.33335 > 198.41.0.4.domain: 50900 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:54:58.720579 vault.lan.33335 > 193.0.14.129.domain: 25450 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:54:59.080515 vault.lan.33335 > 192.112.36.4.domain: 55508 [1au] PTR? 107.0.9.128.in-addr.arpa. (53) (DF)
16:54:59.160437 vault.lan.33335 > 202.12.27.33.domain: 30298 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:54:59.240441 vault.lan.33335 > 193.0.14.129.domain: 56786 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:54:59.320407 vault.lan.33335 > 128.63.2.53.domain: 30512 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:00.740398 vault.lan.33335 > 192.203.230.10.domain: 48024 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:55:01.090145 vault.lan.33335 > 198.41.0.4.domain: 56780 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:01.140091 vault.lan.33335 > 198.41.0.4.domain: 61158 A? www.telus.net. (31) (DF)
16:55:01.140170 vault.lan.33335 > 198.41.0.4.domain: 31741 NS? . (17) (DF)
16:55:01.180102 vault.lan.33335 > 128.9.0.107.domain: 40990 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:01.260291 vault.lan.33335 > 192.203.230.10.domain: 53263 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:01.340058 vault.lan.33335 > 192.58.128.30.domain: 27533 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:03.109791 vault.lan.33335 > 128.63.2.53.domain: 23105 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:03.199744 vault.lan.33335 > 192.33.4.12.domain: 3382 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:03.279764 vault.lan.33335 > 192.5.5.241.domain: 1691 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:03.359697 vault.lan.33335 > 198.32.64.12.domain: 50675 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:05.060423 vault.lan.33335 > 192.203.230.10.domain: 62266 [1au] PTR? 241.5.5.192.in-addr.arpa. (53) (DF)
16:55:05.129417 vault.lan.33335 > 192.58.128.30.domain: 31133 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:05.219386 vault.lan.33335 > 128.8.10.90.domain: 35865 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:05.299366 vault.lan.33335 > 192.112.36.4.domain: 36712 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:05.379341 vault.lan.33335 > 202.12.27.33.domain: 9215 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:07.079104 vault.lan.33335 > 192.5.5.241.domain: 35882 [1au] PTR? 241.5.5.192.in-addr.arpa. (53) (DF)
16:55:07.149035 vault.lan.33335 > 198.32.64.12.domain: 25348 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:07.239027 vault.lan.33335 > 192.36.148.17.domain: 45442 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:07.318995 vault.lan.33335 > 198.41.0.4.domain: 44068 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:07.399048 vault.lan.33335 > 128.9.0.107.domain: 22034 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:08.758790 vault.lan.33335 > 192.5.5.241.domain: 43785 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:55:09.098725 vault.lan.33335 > 192.112.36.4.domain: 13550 [1au] PTR? 241.5.5.192.in-addr.arpa. (53) (DF)
16:55:09.158682 vault.lan.33335 > 128.63.2.53.domain: 52533 A? www.telus.net. (31) (DF)
16:55:09.158763 vault.lan.33335 > 128.63.2.53.domain: 19719 NS? . (17) (DF)
16:55:09.158862 vault.lan.33335 > 202.12.27.33.domain: 63969 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:09.258687 vault.lan.33335 > 193.0.14.129.domain: 35672 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:09.338642 vault.lan.33335 > 128.63.2.53.domain: 17836 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:09.418692 vault.lan.33335 > 192.33.4.12.domain: 8918 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:11.118380 vault.lan.33335 > 198.41.0.4.domain: 37227 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:11.178341 vault.lan.33335 > 128.9.0.107.domain: 14116 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:11.278476 vault.lan.33335 > 192.203.230.10.domain: 39826 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:11.358290 vault.lan.33335 > 192.58.128.30.domain: 26346 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:11.438270 vault.lan.33335 > 128.8.10.90.domain: 45941 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:13.138022 vault.lan.33335 > 128.63.2.53.domain: 35656 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:13.197983 vault.lan.33335 > 192.33.4.12.domain: 25277 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:13.297931 vault.lan.33335 > 192.5.5.241.domain: 39981 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:13.377925 vault.lan.33335 > 198.32.64.12.domain: 52240 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:13.457912 vault.lan.33335 > 192.36.148.17.domain: 26120 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:15.078382 vault.lan.33335 > 192.203.230.10.domain: 6637 [1au] PTR? 17.148.36.192.in-addr.arpa. (55) (DF)
16:55:15.157678 vault.lan.33335 > 192.58.128.30.domain: 40087 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:15.217624 vault.lan.33335 > 128.8.10.90.domain: 58214 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:15.317587 vault.lan.33335 > 192.112.36.4.domain: 61875 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:15.397591 vault.lan.33335 > 202.12.27.33.domain: 40250 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:15.477557 vault.lan.33335 > 193.0.14.129.domain: 9994 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:16.778100 vault.lan.33335 > 192.112.36.4.domain: 35276 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:55:17.097324 vault.lan.33335 > 192.5.5.241.domain: 50406 [1au] PTR? 17.148.36.192.in-addr.arpa. (55) (DF)
16:55:17.177292 vault.lan.33335 > 198.32.64.12.domain: 57971 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:17.237305 vault.lan.33335 > 192.36.148.17.domain: 8121 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:17.337233 vault.lan.33335 > 198.41.0.4.domain: 39964 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:17.417218 vault.lan.33335 > 128.9.0.107.domain: 19982 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:17.497381 vault.lan.33335 > 192.203.230.10.domain: 9991 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:19.116978 vault.lan.33335 > 192.112.36.4.domain: 8955 [1au] PTR? 17.148.36.192.in-addr.arpa. (55) (DF)
16:55:19.196922 vault.lan.33335 > 202.12.27.33.domain: 64818 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:19.256951 vault.lan.33335 > 193.0.14.129.domain: 32409 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:19.356892 vault.lan.33335 > 128.63.2.53.domain: 37514 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:19.436860 vault.lan.33335 > 192.33.4.12.domain: 51525 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:21.136612 vault.lan.33335 > 198.41.0.4.domain: 38805 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:21.216567 vault.lan.33335 > 128.9.0.107.domain: 38741 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:21.276710 vault.lan.33335 > 192.203.230.10.domain: 37557 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:21.376519 vault.lan.33335 > 192.58.128.30.domain: 62129 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:21.456501 vault.lan.33335 > 128.8.10.90.domain: 14320 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:23.156256 vault.lan.33335 > 128.63.2.53.domain: 7160 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:23.236212 vault.lan.33335 > 192.33.4.12.domain: 50833 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:23.296178 vault.lan.33335 > 192.5.5.241.domain: 52106 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:23.396214 vault.lan.33335 > 198.32.64.12.domain: 58821 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:23.476150 vault.lan.33335 > 192.36.148.17.domain: 27710 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:24.795966 vault.lan.33335 > 198.41.0.4.domain: 46623 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:55:25.096592 vault.lan.33335 > 192.203.230.10.domain: 65137 [1au] PTR? 12.4.33.192.in-addr.arpa. (53) (DF)
16:55:25.175887 vault.lan.33335 > 192.58.128.30.domain: 13955 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:25.255837 vault.lan.33335 > 128.8.10.90.domain: 32744 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:25.315819 vault.lan.33335 > 192.112.36.4.domain: 16372 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:25.415864 vault.lan.33335 > 202.12.27.33.domain: 4056 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:25.495792 vault.lan.33335 > 193.0.14.129.domain: 33747 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:25.515782 vault.lan.33335 > 192.5.5.241.domain: 35405 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:27.115571 vault.lan.33335 > 192.5.5.241.domain: 28712 [1au] PTR? 12.4.33.192.in-addr.arpa. (53) (DF)
16:55:27.195514 vault.lan.33335 > 198.32.64.12.domain: 47124 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:27.275490 vault.lan.33335 > 192.36.148.17.domain: 44650 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:27.335481 vault.lan.33335 > 198.41.0.4.domain: 27614 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:27.435452 vault.lan.33335 > 128.9.0.107.domain: 13807 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:27.515615 vault.lan.33335 > 192.203.230.10.domain: 20208 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:29.135217 vault.lan.33335 > 192.112.36.4.domain: 10104 [1au] PTR? 12.4.33.192.in-addr.arpa. (53) (DF)
16:55:29.215157 vault.lan.33335 > 202.12.27.33.domain: 5052 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:29.295119 vault.lan.33335 > 193.0.14.129.domain: 1152 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:29.355104 vault.lan.33335 > 128.63.2.53.domain: 33029 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:29.455089 vault.lan.33335 > 192.33.4.12.domain: 24900 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:31.154842 vault.lan.33335 > 198.41.0.4.domain: 12450 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:31.234798 vault.lan.33335 > 128.9.0.107.domain: 6225 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:31.314939 vault.lan.33335 > 192.203.230.10.domain: 18006 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:31.374755 vault.lan.33335 > 192.58.128.30.domain: 20891 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:31.474734 vault.lan.33335 > 128.8.10.90.domain: 57596 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:32.814553 vault.lan.33335 > 128.63.2.53.domain: 61566 PTR? 182.181.179.142.in-addr.arpa. (46) (DF)
16:55:33.174637 vault.lan.33335 > 128.63.2.53.domain: 48145 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:33.254477 vault.lan.33335 > 192.33.4.12.domain: 6166 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:33.334416 vault.lan.33335 > 192.5.5.241.domain: 3083 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:33.394398 vault.lan.33335 > 198.32.64.12.domain: 56214 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:33.494380 vault.lan.33335 > 192.36.148.17.domain: 13985 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:33.534372 vault.lan.33335 > 192.112.36.4.domain: 53334 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:35.115107 vault.lan.33335 > 192.203.230.10.domain: 46107 [1au] PTR? 4.36.112.192.in-addr.arpa. (54) (DF)
16:55:35.194106 vault.lan.33335 > 192.58.128.30.domain: 42721 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:35.274115 vault.lan.33335 > 128.8.10.90.domain: 52314 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:35.354052 vault.lan.33335 > 192.112.36.4.domain: 62232 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:35.414067 vault.lan.33335 > 202.12.27.33.domain: 48355 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:35.514021 vault.lan.33335 > 193.0.14.129.domain: 30004 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:35.534015 vault.lan.33335 > 192.5.5.241.domain: 15002 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:37.133802 vault.lan.33335 > 192.5.5.241.domain: 40269 [1au] PTR? 4.36.112.192.in-addr.arpa. (54) (DF)
16:55:37.213748 vault.lan.33335 > 198.32.64.12.domain: 7595 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:37.293726 vault.lan.33335 > 192.36.148.17.domain: 29682 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:37.373710 vault.lan.33335 > 198.41.0.4.domain: 47609 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:37.433684 vault.lan.33335 > 128.9.0.107.domain: 33277 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:37.533844 vault.lan.33335 > 192.203.230.10.domain: 30718 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:39.153455 vault.lan.33335 > 192.112.36.4.domain: 48127 [1au] PTR? 4.36.112.192.in-addr.arpa. (54) (DF)
16:55:39.233392 vault.lan.33335 > 202.12.27.33.domain: 60201 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:39.313368 vault.lan.33335 > 193.0.14.129.domain: 63295 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:39.393392 vault.lan.33335 > 128.63.2.53.domain: 32067 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:39.453332 vault.lan.33335 > 192.33.4.12.domain: 24231 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:41.173079 vault.lan.33335 > 198.41.0.4.domain: 14142 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:41.253012 vault.lan.33335 > 128.9.0.107.domain: 7071 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:41.333192 vault.lan.33335 > 192.203.230.10.domain: 11908 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:41.413041 vault.lan.33335 > 192.58.128.30.domain: 52100 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:41.472972 vault.lan.33335 > 128.8.10.90.domain: 45764 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:41.552954 vault.lan.33335 > 198.41.0.4.domain: 22882 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:43.192723 vault.lan.33335 > 128.63.2.53.domain: 38486 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:43.272655 vault.lan.33335 > 192.33.4.12.domain: 19243 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:43.352657 vault.lan.33335 > 192.5.5.241.domain: 28993 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:43.432627 vault.lan.33335 > 198.32.64.12.domain: 35086 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:43.492616 vault.lan.33335 > 192.36.148.17.domain: 25165 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:43.552604 vault.lan.33335 > 192.112.36.4.domain: 52181 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:45.133296 vault.lan.33335 > 192.203.230.10.domain: 11282 [1au] PTR? 4.0.41.198.in-addr.arpa. (52) (DF)
16:55:45.212340 vault.lan.33335 > 192.58.128.30.domain: 2880 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:45.292312 vault.lan.33335 > 128.8.10.90.domain: 1440 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:45.372300 vault.lan.33335 > 192.112.36.4.domain: 720 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:45.452271 vault.lan.33335 > 202.12.27.33.domain: 360 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:45.512314 vault.lan.33335 > 193.0.14.129.domain: 49205 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:45.552255 vault.lan.33335 > 192.5.5.241.domain: 56463 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:47.152029 vault.lan.33335 > 192.5.5.241.domain: 41243 [1au] PTR? 4.0.41.198.in-addr.arpa. (52) (DF)
16:55:47.231980 vault.lan.33335 > 198.32.64.12.domain: 7074 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:47.311942 vault.lan.33335 > 192.36.148.17.domain: 36305 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:47.391945 vault.lan.33335 > 198.41.0.4.domain: 16322 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:47.471913 vault.lan.33335 > 128.9.0.107.domain: 8161 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:47.532139 vault.lan.33335 > 192.203.230.10.domain: 63626 PTR? 107.0.9.128.in-addr.arpa. (42) (DF)
16:55:49.175488 vault.lan.33335 > 192.112.36.4.domain: 31813 [1au] PTR? 4.0.41.198.in-addr.arpa. (52) (DF)
16:55:49.241637 vault.lan.33335 > 202.12.27.33.domain: 36993 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:49.331597 vault.lan.33335 > 193.0.14.129.domain: 45007 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:49.411577 vault.lan.33335 > 128.63.2.53.domain: 12896 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:49.491557 vault.lan.33335 > 192.33.4.12.domain: 3261 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:49.571559 vault.lan.33335 > 128.63.2.53.domain: 38976 PTR? 33.27.12.202.in-addr.arpa. (43) (DF)
16:55:51.191311 vault.lan.33335 > 198.41.0.4.domain: 19488 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:55:51.261299 vault.lan.33335 > 128.9.0.107.domain: 42512 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:51.351414 vault.lan.33335 > 192.203.230.10.domain: 54024 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:51.431219 vault.lan.33335 > 192.58.128.30.domain: 13543 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:51.511199 vault.lan.33335 > 128.8.10.90.domain: 15424 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:51.571204 vault.lan.33335 > 198.41.0.4.domain: 20351 PTR? 10.230.203.192.in-addr.arpa. (45) (DF)
16:55:53.210953 vault.lan.33335 > 128.63.2.53.domain: 20975 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:55:53.280891 vault.lan.33335 > 192.33.4.12.domain: 43484 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:53.370867 vault.lan.33335 > 192.5.5.241.domain: 21742 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:55:53.450857 vault.lan.33335 > 198.32.64.12.domain: 10871 PTR? 17.148.36.192.in-addr.arpa. (44) (DF)
16:55:53.530840 vault.lan.33335 > 192.36.148.17.domain: 48384 PTR? 241.5.5.192.in-addr.arpa. (42) (DF)
16:55:53.570856 vault.lan.33335 > 192.112.36.4.domain: 56960 PTR? 90.10.8.128.in-addr.arpa. (42) (DF)
16:55:55.151291 vault.lan.33335 > 192.203.230.10.domain: 61248 [1au] PTR? 129.14.0.193.in-addr.arpa. (54) (DF)
16:55:55.230584 vault.lan.33335 > 192.58.128.30.domain: 63392 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:55:55.300539 vault.lan.33335 > 128.8.10.90.domain: 64464 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:55:55.390572 vault.lan.33335 > 192.112.36.4.domain: 32465 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:56:10.028695 vault.lan.33335 > 192.203.230.10.domain: 54235 [1au] PTR? 53.2.63.128.in-addr.arpa. (53) (DF)
16:56:11.307774 vault.lan.33335 > 128.9.0.107.domain: 26703 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:11.387898 vault.lan.33335 > 192.203.230.10.domain: 46143 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:56:20.046966 vault.lan.33335 > 192.203.230.10.domain: 11856 [1au] PTR? 30.128.58.192.in-addr.arpa. (55) (DF)
16:56:20.126175 vault.lan.33335 > 192.58.128.30.domain: 5928 PTR? 53.2.63.128.in-addr.arpa. (42) (DF)
16:56:21.406160 vault.lan.33335 > 192.203.230.10.domain: 1445 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:21.485931 vault.lan.33335 > 192.58.128.30.domain: 43051 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:56:21.545912 vault.lan.33335 > 128.8.10.90.domain: 57583 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:56:30.065192 vault.lan.33335 > 192.203.230.10.domain: 1863 [1au] PTR? 12.64.32.198.in-addr.arpa. (54) (DF)
16:56:30.144400 vault.lan.33335 > 192.58.128.30.domain: 21335 PTR? 30.128.58.192.in-addr.arpa. (44) (DF)
16:56:30.224394 vault.lan.33335 > 128.8.10.90.domain: 48593 PTR? 53.2.63.128.in-addr.arpa. (42) (DF)
16:56:31.504199 vault.lan.33335 > 192.58.128.30.domain: 7066 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:31.584151 vault.lan.33335 > 128.8.10.90.domain: 1768 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
16:56:40.162659 vault.lan.33335 > 192.58.128.30.domain: 6332 PTR? 12.64.32.198.in-addr.arpa. (43) (DF)
16:56:40.242649 vault.lan.33335 > 128.8.10.90.domain: 3166 PTR? 30.128.58.192.in-addr.arpa. (44) (DF)
16:56:40.322632 vault.lan.33335 > 192.112.36.4.domain: 17177 PTR? 53.2.63.128.in-addr.arpa. (42) (DF)
16:56:41.602416 vault.lan.33335 > 128.8.10.90.domain: 4543 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:41.662409 vault.lan.33335 > 198.41.0.4.domain: 2067 PTR? 12.4.33.192.in-addr.arpa. (42) (DF)
16:56:42.182318 vault.lan.33335 > 198.32.64.12.domain: 1149 PTR? 12.64.32.198.in-addr.arpa. (43) (DF)
16:56:42.262291 vault.lan.33335 > 192.36.148.17.domain: 49764 PTR? 30.128.58.192.in-addr.arpa. (44) (DF)
16:56:42.342280 vault.lan.33335 > 198.41.0.4.domain: 57650 PTR? 53.2.63.128.in-addr.arpa. (42) (DF)
16:56:43.622067 vault.lan.33335 > 192.36.148.17.domain: 61593 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:43.642048 vault.lan.33335 > 192.112.36.4.domain: 4107 PTR? 4.36.112.192.in-addr.arpa. (43) (DF)
16:56:44.201964 vault.lan.33335 > 202.12.27.33.domain: 62005 PTR? 12.64.32.198.in-addr.arpa. (43) (DF)
16:56:44.281935 vault.lan.33335 > 193.0.14.129.domain: 57962 PTR? 30.128.58.192.in-addr.arpa. (44) (DF)
16:56:44.361920 vault.lan.33335 > 128.63.2.53.domain: 47326 PTR? 53.2.63.128.in-addr.arpa. (42) (DF)
16:56:45.641718 vault.lan.33335 > 193.0.14.129.domain: 56431 PTR? 129.14.0.193.in-addr.arpa. (43) (DF)
16:56:45.661687 vault.lan.33335 > 192.5.5.241.domain: 9199 PTR? 4.0.41.198.in-addr.arpa. (41) (DF)
More information about the bind-users
mailing list