Reverse lookups failing

Davenport, Steve M SDavenpo at mc.utmck.edu
Tue Nov 18 13:44:21 UTC 2008


Please disregard. This is working now. Was either an ASA firewall dns
filter which was stopped and restarted during testing or the setting of
both nameservers to run bind9.3.5-P2.

________________________________

From: bind-users-bounces at lists.isc.org
[mailto:bind-users-bounces at lists.isc.org] On Behalf Of Davenport, Steve
M
Sent: Monday, November 17, 2008 8:20 PM
To: comp-protocols-dns-bind at isc.org
Subject: Reverse lookups failing


Hello,
 
I am having issues with reverse lookups failing and can not find the
cause. Running bind 9.3.5-P1 and 9.3.6rc1.
On an external server dig gives:
 
$ dig @harley.mc.utmck.edu -x 165.6.6.27
; <<>> DiG 9.5.0-P1 <<>> @harley.mc.utmck.edu -x 165.6.6.27
; (1 server found)
;; global options:  printcmd
;; connection timed out; no servers could be reached

 
Internally the same query is fine:
$ dig @harley.mc.utmck.edu -x 165.6.6.27
; <<>> DiG 9.2.4 <<>> @harley.mc.utmck.edu -x 165.6.6.27
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1952
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;27.6.6.165.in-addr.arpa.       IN      PTR
;; ANSWER SECTION:
27.6.6.165.in-addr.arpa. 21600  IN      PTR     ns-2.hosp.utmck.edu.
;; AUTHORITY SECTION:
6.165.in-addr.arpa.     21600   IN      NS      ns-2.hosp.utmck.edu.
6.165.in-addr.arpa.     21600   IN      NS      harley.mc.utmck.edu.
;; ADDITIONAL SECTION:
ns-2.hosp.utmck.edu.    21600   IN      A       165.6.6.27
harley.mc.utmck.edu.    21600   IN      A       165.6.131.32
;; Query time: 18 msec
;; SERVER: 165.6.131.32#53(harley.mc.utmck.edu)
;; WHEN: Mon Nov 17 19:50:49 2008
;; MSG SIZE  rcvd: 144

The config file has "allow query" set on the reverse zone. This was
working earlier and I'm told there have been no network changes.
 
Does this appear to be a firewall issue? Is there anything else that
might help narrow down the problem?
 
Thanks for your assistance,
Steve

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20081118/143b4f88/attachment.html>


More information about the bind-users mailing list