Bind & FORMERR resolving domain

[NeMeM9aA]

Ok. Tohle vypada, ze to pomohlo.

Ovsem nechapu proc. Odkud vubec pozna kam preposilat dotazy, na ktere nezna odpoved? Z /etc/resolv.conf? Tam mam uvedene stejne IP jako ve forwarders a jako prvni je IP adresa diskutovaneho stroje. V cem je potom rozdil, zejmena pokud je zakomentovany radek "forward first;"?

edit: tak to nefunguje. Funguji sice vyse zminene adresy, ale zase nefunguje www.shorewall.net (reloadnul jsem taby co mam ve firefoxu - cca 50 adres a jen jedna nefunguje)

[Rainbow]

BIND ma IP adresy root DNS serverov (subor named.ca v tvojom konfiguraku). Od nich sa dozvie podla potreby IP adresy serverov pre tld a tak dalej.
Ked mas funkcny BIND na localhoste, tak do /etc/resolv.conf nastav nameserver 127.0.0.1.
Musi fungovat vsetko, aj ten shorewall.

[NeMeM9aA]

Vida - moje znalosti jsou pomerne dost omezene. Kazdopadne shorewall.net momentalne nefunguje. A uz zase nefunguje microsoft.com (pred hodinou jeste fungoval). Zbytek funguje. Opravdu netusim, kde jsem co zvoral.

.....
14-Feb-2008 18:42:26.521 FORMERR resolving 'www.shorewall.net/A/IN': 128.63.2.53#53
14-Feb-2008 18:42:26.547 FORMERR resolving 'www.shorewall.net/A/IN': 192.33.4.12#53
14-Feb-2008 18:42:26.571 FORMERR resolving 'www.shorewall.net/A/IN': 192.228.79.201#53
14-Feb-2008 18:42:28.623 FORMERR resolving 'www.shorewall.net/A/IN': 192.36.148.17#53
14-Feb-2008 18:42:28.665 FORMERR resolving 'www.shorewall.net/A/IN': 202.12.27.33#53
14-Feb-2008 18:42:28.760 FORMERR resolving 'www.shorewall.net/A/IN': 192.58.128.30#53
14-Feb-2008 18:42:28.860 FORMERR resolving 'www.shorewall.net/A/IN': 193.0.14.129#53
14-Feb-2008 18:42:30.904 FORMERR resolving 'www.shorewall.net/A/IN': 192.5.5.241#53
14-Feb-2008 18:42:30.934 FORMERR resolving 'www.shorewall.net/A/IN': 192.112.36.4#53
14-Feb-2008 18:42:30.966 FORMERR resolving 'www.shorewall.net/A/IN': 128.8.10.90#53
14-Feb-2008 18:42:31.005 FORMERR resolving 'www.shorewall.net/A/IN': 198.32.64.12#53
14-Feb-2008 18:42:31.042 FORMERR resolving 'www.shorewall.net/A/IN': 198.41.0.4#53
14-Feb-2008 18:43:36.856 FORMERR resolving 'www.microsoft.com/A/IN': 77.48.100.254#53
14-Feb-2008 18:43:38.878 FORMERR resolving 'www.microsoft.com/A/IN': 77.48.254.254#53
14-Feb-2008 18:43:38.902 FORMERR resolving 'www.microsoft.com/A/IN': 192.228.79.201#53
14-Feb-2008 18:43:38.916 FORMERR resolving 'www.microsoft.com/A/IN': 192.33.4.12#53
14-Feb-2008 18:43:38.931 FORMERR resolving 'www.microsoft.com/A/IN': 192.112.36.4#53
14-Feb-2008 18:43:38.945 FORMERR resolving 'www.microsoft.com/A/IN': 192.5.5.241#53
14-Feb-2008 18:43:38.953 FORMERR resolving 'www.microsoft.com/A/IN': 192.203.230.10#53
14-Feb-2008 18:43:38.970 FORMERR resolving 'www.microsoft.com/A/IN': 202.12.27.33#53
14-Feb-2008 18:43:38.983 FORMERR resolving 'www.microsoft.com/A/IN': 192.36.148.17#53
14-Feb-2008 18:43:38.991 FORMERR resolving 'www.microsoft.com/A/IN': 128.63.2.53#53
14-Feb-2008 18:43:39.012 FORMERR resolving 'www.microsoft.com/A/IN': 128.8.10.90#53
....

edit:

jeste abych doplnil : konkretne se jedna o verzi bindu 9.3.4-r2 na 2.6.22-gentoo-r5.

Verze bude ovsem asi nepodstatna, protoze uz me to dela delsi dobu, akorat jsem to neresil. Tusim, ze jsem mel stejny problem uz na slackwaru 10. Zkousel jsem zakomentovat zone "gj" vcetne jeji reverzni casti a stejny problem. Nechapu, kde jsem mohl vyprodukovat takhle podivne a nevyzpytatelne chovani.

edit2: upgrade na bind-9.4.1_p1 nepomohl. Chova se to stejne.

[Rainbow]

Mne ten 9.4.1_p1 funguje. Ale nemam v konfiguraku ten bordel okolo logovania - skus to vsetko zakomentovat.

[NeMeM9aA]

$ cat /etc/bind/named.conf 
options {
        directory "/var/bind";

       dump-file "/var/bind/named.dump";

        listen-on-v6 { none; };
        listen-on { 127.0.0.1;
                    192.168.1.50;
        };

        pid-file "/var/run/named/named.pid";
};


zone "." IN {
        type hint;
        file "named.ca";
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
          allow-update { none; };
        notify no;
};

zone "127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
        notify no;
};

named.local, localhost.zone a named.ca jsem pro jistotu pouzil nove - ze current slackware.

Nefunguje microsoft, shorewall.net uz zase zacal fungovat - nemam pocit, ze by to nejak souviselo s momentalne pouzitou konfiguraci. Spis je to zcela nahodne.

edit: ted zcela nahodne prestalo fungovat napr. yahoo:

# cat /var/log/messages |tail -50
Feb 15 11:47:55 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.112.36.4#53
Feb 15 11:47:56 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.36.148.17#53
Feb 15 11:47:56 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.203.230.10#53
Feb 15 11:47:57 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 128.63.2.53#53
Feb 15 11:47:58 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.228.79.201#53
Feb 15 11:47:58 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 202.12.27.33#53
Feb 15 11:47:58 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 198.32.64.12#53
Feb 15 11:47:59 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 193.0.14.129#53
Feb 15 11:49:37 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 128.8.10.90#53
Feb 15 11:49:37 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.228.79.201#53
Feb 15 11:49:38 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.5.5.241#53
Feb 15 11:49:38 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 198.41.0.4#53
Feb 15 11:49:39 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.36.148.17#53
Feb 15 11:49:40 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 198.32.64.12#53
Feb 15 11:49:40 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 202.12.27.33#53
Feb 15 11:49:41 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 193.0.14.129#53
Feb 15 11:49:41 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.203.230.10#53
Feb 15 11:49:41 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.33.4.12#53
Feb 15 11:49:42 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.112.36.4#53
Feb 15 11:49:44 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 128.63.2.53#53
Feb 15 11:49:44 padesat named[31484]: FORMERR resolving 'www.microsoft.com/A/IN': 192.58.128.30#53
Feb 15 11:49:53 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 202.12.27.33#53
Feb 15 11:49:53 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 198.32.64.12#53
Feb 15 11:49:54 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 128.8.10.90#53
Feb 15 11:49:54 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.33.4.12#53
Feb 15 11:49:55 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 193.0.14.129#53
Feb 15 11:49:57 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.228.79.201#53
Feb 15 11:49:58 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.36.148.17#53
Feb 15 11:49:58 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 128.63.2.53#53
Feb 15 11:49:59 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.112.36.4#53
Feb 15 11:50:02 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.5.5.241#53
Feb 15 11:50:03 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 198.41.0.4#53
Feb 15 11:50:04 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.58.128.30#53
Feb 15 11:50:05 padesat named[31484]: FORMERR resolving 'www.yahoo.com/A/IN': 192.203.230.10#53
Feb 15 11:50:20 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 128.8.10.90#53
Feb 15 11:50:20 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 128.63.2.53#53
Feb 15 11:50:21 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 202.12.27.33#53
Feb 15 11:50:22 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.33.4.12#53
Feb 15 11:50:22 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.36.148.17#53
Feb 15 11:50:22 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.112.36.4#53
Feb 15 11:50:23 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 198.32.64.12#53
Feb 15 11:50:23 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.5.5.241#53
Feb 15 11:50:23 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.228.79.201#53
Feb 15 11:50:23 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 198.41.0.4#53
Feb 15 11:50:24 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.58.128.30#53
Feb 15 11:50:24 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 192.203.230.10#53
Feb 15 11:50:24 padesat named[31484]: FORMERR resolving 'www.phoenix.cz/A/IN': 193.0.14.129#53

[Rainbow]

Vyskusal si to aj cez nslookup alebo dig?

[NeMeM9aA]

edit: uz zacinam nachazet urcite souvislosti. Bouzel neni moc casu. Zitra dam vedet.

edit2: tenhle post byl informacne pusty, takze jsem ho vicemene zrusil. Stale ale plati, ze zitra odpoledne postnu vysledky meho boje s bindem.