Trouble forwarding queries

[Chris Buxton]

On Jul 15, 2011, at 1:25 AM, Jan Rademaker wrote:

> Some time last night bind seems to have stopped forwarding queries. This is the error bind logs.
> 
> 15-Jul-2011 09:30:10.074 resolver: debug 1: createfetch: nu.nl A
> 15-Jul-2011 09:30:10.074 query-errors: debug 1: client 83.247.6.154#52497: query failed (SERVFAIL) for nu.nl/IN/A at query.c:4020
> 
> tcpdump show no traffic to or from the upstream dns servers.
> 
> Here's part of the named.conf:
> 
> options {
>    allow-transfer {
> 	a.b.c.d;
>    };
>    forwarders {
>      208.67.222.222;
>      208.67.220.220;
>    };
>    directory "/etc/namedb";
>    version "BWSS DNS";
>    auth-nxdomain no;
> 
>    allow-recursion { 127.0.0.1; 83.247.6.128/26; };
> };
> 
> # named -V
> BIND 9.7.0-P1 built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-dlz-postgres=no' '--with-dlz-mysql=no' '--with-dlz-bdb=yes' '--with-dlz-filesystem=yes' '--with-dlz-ldap=yes' '--with-dlz-stub=yes' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions' 'CPPFLAGS='
> 
> Any idea where I shoud look?

Restart named. Then upgrade it to something more current. 9.7.0-P1 has a few vulnerabilities.

Regards,
Chris Buxton
BlueCat Networks