Fwd: ip forwarding DNS 9.6.0

[myron]

I gave the wrong view if that makes the difference. That was the  
internal network.

view "external" {
  match-clients { any; };
  recursion no;

--myron
=================================
Myron Kowalski
MoCoSIN Network/Systems Administrator
Moravian College
myron at cs.moravian.edu



Begin forwarded message:

> From: myron <kowalskM at cs.moravian.edu>
> Date: April 6, 2009 12:00:55 PM EDT
> To: bind-users at lists.isc.org
> Subject: ip forwarding DNS 9.6.0
>
> I upgraded from 9.2.3.
>
> I can't seem to do forwarding from a browser.
>
> Everything works from 9.2.3. When I swap out to 9.6.0, from a  
> command line I
> can do: nslookup; ping outside the domain; traceroute outside the  
> domain.
>
> From a web browser I can get out if I use the ip address. However,  
> when I
> put in a canonical name get an rcode 5.
>
> There's a barracuda spam firewall in the path. If I take it out,  
> then everything works.
> There's really nothing to change on the barracuda as far as dns is  
> concerned, other
> than pointing to a dns server.
>
> snoop on the wire:
> 9.6.0
> barracuda -> ns     DNS C www22.verizon.com. Internet Addr ?
>   ns -> barracuda DNS R  Error: 5(Refused)
>
> 9.2.3
> barracuda -> ns     DNS C www22.verizon.com. Internet Addr ?
>   ns -> barracuda DNS R www22.verizon.com. Internet CNAME  
> www22.verizon.com.edgekey.net.
>
> I glanced through the archives and found some suggestions about  
> recursions to ip forwarding. I think the
> conf is set up correctly. At least, it works fine with 9.2.3.
>
> Here's some of my named.conf edited.
>
> acl mylab {
>       10.0.0.0/8;
> };
> options {
>       directory       "/etc/dns";
>       auth-nxdomain   yes;
> };
> view "trusted" {
> match-clients { mylab; };
> recursion yes;
> zone "moravian.edu" in {
>       type forward;
>       forwarders { 10.22.5.32; 10.22.5.38; };
> };
>
> Any help appreciated.
>
> --myron
> =================================
> Myron Kowalski
> MoCoSIN Network/Systems Administrator
> Moravian College
> myron at cs.moravian.edu
>
>
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20090406/158271da/attachment.html>