Solved

Dns not working

Posted on 2000-02-23
7
330 Views
Last Modified: 2010-08-05
Am a newbie and am trying to configure a machine as a primary dns for the domain mail.articulateonline.com

i think the config is correct and i still dont know what is wrong. please help.

follows are the configuration files.

named.conf
-----------
options {
      directory "/var/named";
};
zone "." {
      type hint;
      file "named.ca";
};
zone "0.0.127.in-addr.arpa"{
      type master;
      file "named.local";
};



zone "articulateonline.com" {
      type master;
      file "/var/named/articulateonline.com.hosts";
      also-notify {
            202.187.120.252;
            };
      notify yes;
      };

zone "120.187.202.in-addr.arpa" {
      type master;
      file "/var/named/202.187.120.rev";
      also-notify {
            202.187.120.252;
            };
      notify yes;
      };


articulateonline.com.hosts
--------------------------
articulateonline.com.      IN      SOA      mail. root.articulateonline.com. (
                  945759165
                  10800
                  3600
                  432000
                  38400 )
articulateonline.com.      IN      NS      mail.
articulateonline.com.      IN      MX      10 articulateonline.com.
mail.articulateonline.com.      IN      CNAME      articulateonline.com.
articulateonline.com.      IN      A      202.187.120.249


202.187.120.rev
---------------
120.187.202.in-addr.arpa.      IN      SOA      mail.articulateonline.com   root.articulateonline.com. (
                  945759189  ; Serial
                  10800      ; Refresh
                  1800       ; Retry
                  432000     ; Expire
                  21600 )    ; Minimum

                     IN      NS      mail.articulateonline.com.
                    IN  NS      dns2.articulateonline.com.

@            IN  PTR      mail.articulateonline.com.
248            IN  PTR      hostname.ibidlive.com.
252           IN  PTR      hostname.pos-premium.com.



resolv.conf
-----------
nameserver 202.187.120.249
nameserver 202.187.120.252



thanks in advance.










0
Comment
Question by:noree97
  • 4
  • 3
7 Comments
 

Accepted Solution

by:
Timmermann earned 160 total points
ID: 2549976
Hello,

what is the problem?

any error-messages?

tell this

0
 

Author Comment

by:noree97
ID: 2552496
I tried to do an nslookup and the results are as follows.  And am only able to do a successful nslookup on that domain with the server as localhost.


> server 202.187.120.249
Default Server:  [202.187.120.249]
Address:  202.187.120.249

> mail.articulateonline.com
Server:  [202.187.120.249]
Address:  202.187.120.249

*** [202.187.120.249] can't find mail.articulateonline.com: No response from ser
ver
>  

0
 

Author Comment

by:noree97
ID: 2552510
Am sorry....
that error was with the default resov.conf

nameserver 202.187.120.2
nameserver 202.185.200.2
nameserver 202.185.199.250

but if it is

nameserver 202.187.120.249
nameserver 202.187.120.252

I get the error message that there is no response from both of the server.

0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 

Expert Comment

by:Timmermann
ID: 2553363
sorry, no idea...

can you take a log in
/var/log/messages for hints?

Can you enable a debugging on nslookup?

Is the TCP/IP Port to the Name-Server
ready for questions?

HTH anyhow...

Timmermann
0
 

Author Comment

by:noree97
ID: 2556920
Adjusted points to 160
0
 

Author Comment

by:noree97
ID: 2556921
how can i enable debugging on nslookup?

and how can i check if the TCP/IP Port to the Name-Server
ready for questions?

i restart the ndc service and this is what i got from /var/log/messages

Feb 25 14:52:58 articulateonline named[30862]: starting.  named 8.2.1 Fri Sep 24 14:52:24 EDT 1999 ^Iroot@porky.devel.redhat.com:/
usr/src/bs/BUILD/bind-8.2.1/src/bin/named
Feb 25 14:52:58 articulateonline named[30862]: hint zone "" (IN) loaded (serial 0)
Feb 25 14:52:58 articulateonline named[30862]: Zone "0.0.127.in-addr.arpa" (file named.local): No default TTL set using SOA minimu
m instead
Feb 25 14:52:58 articulateonline named[30862]: master zone "0.0.127.in-addr.arpa" (IN) loaded (serial 1997022700)
Feb 25 14:52:58 articulateonline named[30862]: Zone "articulateonline.com" (file /var/named/articulateonline.com.hosts): No defaul
t TTL set using SOA minimum instead
Feb 25 14:52:58 articulateonline named[30862]: /var/named/articulateonline.com.hosts: WARNING SOA expire value is less than 7 days
 (432000)
Feb 25 14:52:58 articulateonline named[30862]: /var/named/articulateonline.com.hosts:13: IP Address error (202.187.120.xx)
Feb 25 14:52:58 articulateonline named[30862]: master zone "articulateonline.com" (IN) rejected due to errors (serial 945759165)
Feb 25 14:52:58 articulateonline named[30862]: Zone "120.187.202.in-addr.arpa" (file /var/named/202.187.120.rev): No default TTL s
et using SOA minimum instead
Feb 25 14:52:58 articulateonline named[30862]: /var/named/202.187.120.rev: WARNING SOA expire value is less than 7 days (432000)
Feb 25 14:52:58 articulateonline named[30862]: master zone "120.187.202.in-addr.arpa" (IN) loaded (serial 945759189)
Feb 25 14:52:58 articulateonline named[30862]: Zone "ibidlive.com" (file /var/named/ibidlive.com.hosts): No default TTL set using
SOA minimum instead
Feb 25 14:52:58 articulateonline named[30862]: /var/named/ibidlive.com.hosts: WARNING SOA expire value is less than 7 days (432000
)
Feb 25 14:52:58 articulateonline named[30862]: master zone "ibidlive.com" (IN) loaded (serial 945760195)
Feb 25 14:52:58 articulateonline named[30862]: Zone "pos-premium.com" (file /var/named/pos-premium.com.hosts): No default TTL set
using SOA minimum instead
Feb 25 14:52:58 articulateonline named[30862]: /var/named/pos-premium.com.hosts: WARNING SOA expire value is less than 7 days (432
000)
Feb 25 14:52:58 articulateonline named[30862]: master zone "pos-premium.com" (IN) loaded (serial 946544118)
Feb 25 14:52:58 articulateonline named[30862]: Zone "limborock.com" (file /var/named/limborock.com.hosts): No default TTL set usin
g SOA minimum instead
Feb 25 14:52:58 articulateonline named[30862]: /var/named/limborock.com.hosts: WARNING SOA expire value is less than 7 days (43200
0)
Feb 25 14:52:58 articulateonline named[30862]: master zone "limborock.com" (IN) loaded (serial 946546955)
Feb 25 14:52:58 articulateonline named[30862]: listening on [127.0.0.1].53 (lo)
Feb 25 14:52:58 articulateonline named[30862]: listening on [10.200.200.2].53 (eth0)
Feb 25 14:52:58 articulateonline named[30862]: Forwarding source address is [0.0.0.0].3511
Feb 25 14:52:58 articulateonline named[30863]: Ready to answer queries.
Feb 25 14:53:07 articulateonline named[30863]: sysquery: findns error (SERVFAIL) on dns2.articulateonline.com?
Feb 25 14:53:07 articulateonline named[30863]: Sent NOTIFY for "120.187.202.in-addr.arpa IN SOA" (120.187.202.in-addr.arpa); 2 NS,
 2 A
Feb 25 14:53:08 articulateonline named[30863]: Sent NOTIFY for "ibidlive.com IN SOA" (ibidlive.com); 1 NS, 1 A
Feb 25 14:53:08 articulateonline named[30863]: Response from unexpected source ([10.200.200.4].53)
Feb 25 14:53:24 articulateonline named[30863]: Sent NOTIFY for "pos-premium.com IN SOA" (pos-premium.com); 1 NS, 1 A
Feb 25 14:53:25 articulateonline named[30863]: Sent NOTIFY for "limborock.com IN SOA" (limborock.com); 1 NS, 1 A
0
 

Expert Comment

by:Timmermann
ID: 2556961
Debugging Nslookup..

look in manpage of nslookup:
----------
SEE ALSO
     nstest(1M), resolver(3N), resolv.conf(4)

     RFC 882, RFC 883
---------
so nstest may help and the RFCs

port open for nameserver? Test it
with a look in /etc/services ...

at 42 it schould be active

a portscan on your own machine might
help too.

-----

Lookout for Errors here:

Feb 25 14:52:58 articulateonline named[30862]: starting.  named 8.2.1 Fri Sep 24 14:52:24 EDT 1999 ^Iroot@porky.devel.redhat.com:/
usr/src/bs/BUILD/bind-8.2.1/src/bin/named

anyhow.. better take the newest bind
for security reasons... esp. if you
set up primary DNS

Feb 25 14:52:58 articulateonline named[30862]: Zone "0.0.127.in-addr.arpa" (file named.local): No default TTL set using SOA minimum instead

UPS!

TTL is danger!  Look in o reilys book
on BIND!

If you configure a high TTL and another
DNS recognize this, it wont be possible
to tell changes to the internet...

until TTL is elapsed! Danger!

/var/named/articulateonline.com.hosts:13: IP Address error (202.187.120.xx)
Feb 25 14:52:58 articulateonline named[30862]: master zone "articulateonline.com" (IN) rejected due to errors (serial 945759165)

Look! Rejected! so no answer!
look in manpage of  named too!

Feb 25 14:52:58 articulateonline named[30862]: master zone "limborock.com" (IN) loaded (serial 946546955)

hoho!

Feb 25 14:52:58 articulateonline named[30862]: listening on [127.0.0.1].53 (lo)

on lo = local limborock should work

Feb 25 14:52:58 articulateonline named[30862]: listening on [10.200.200.2].53 (eth0)

on ethernet-card (ifconfig!)

Feb 25 14:52:58 articulateonline named[30863]: Ready to answer queries.


Feb 25 14:53:07 articulateonline named[30863]: sysquery: findns error (SERVFAIL) on dns2.articulateonline.com?

OHOH! where is dns2?

Feb 25 14:53:07 articulateonline named[30863]: Sent NOTIFY for "120.187.202.in-addr.arpa IN SOA" (120.187.202.in-addr.arpa); 2 NS,
 2 A
Feb 25 14:53:08 articulateonline named[30863]: Sent NOTIFY for "ibidlive.com IN SOA" (ibidlive.com); 1 NS, 1 A
Feb 25 14:53:08 articulateonline named[30863]: Response from unexpected source ([10.200.200.4].53)

ups!

Feb 25 14:53:24 articulateonline named[30863]: Sent NOTIFY for "pos-premium.com IN SOA" (pos-premium.com); 1 NS, 1 A
Feb 25 14:53:25 articulateonline named[30863]: Sent NOTIFY for "limborock.com IN SOA" (limborock.com); 1 NS, 1 A

here the nameserver tries first publishing of his configuration to the
internet...

Hope it helps...

I advise the oReily book on dns + Bind
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
This video discusses moving either the default database or any database to a new volume.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now