Querying directly a nameserver works, while forwarding not

[Hauke Lampe]

On 05.12.2012 10:23, Daniele Imbrogino wrote:

> I restarted BIND9 and then I tried, for example, 'dig www.apple.com'
> obtaining "connection timed out; no servers could be reached".
> But if I try 'dig @10.0.2.3 www.apple.com' it works correctly and I obtain
> the correct answer.
>
> Why? How can I resolve this problem?

Look at your resolv.conf and make sure that it actually directs queries 
to your newly installed BIND.

Check the log for mentions of rejected queries, even though those 
shouldn't result in a timeout. The default configuration allows 
recursive queries from localhost and your local network.

If all else fails, trace the query packets with tcpdump and find out 
where they end up.


Hauke.