DNS lookups failing on outside adapter

I'm setting up a network and I'm working on setting up my DNS servers.  The problem I'm having right now is that while DNS lookups for my domain are working from the inside (I'm querying the new DNS server from the inside network and I'm getting the correct values back) when I try to access it from the outside, I get a  Connection timed out error.  The connection is firewalled, but I've opened the port up to the outside.

These are the ports that are open to the outside world:

21/tcp     open        ftp
22/tcp     open        ssh
23/tcp     open        telnet
25/tcp     open        smtp
53/tcp     open        domain
80/tcp     open        http
110/tcp    open        pop-3

I can also telnet to port 53 and it accepts the connection, but when I try to run 'dig' against my server, it fails and refuses to connect.  I've set up bind to log everything and I get nothing in the logfile when I connect from my outside machine.

This is my named.conf file:

options {
        directory "/var/named";
        pid-file "named.pid";              // Put pid file in working dir
        interface-interval 0;
};

logging {
        channel namedlog {
                file "/var/log/named.log" versions 5 size 2m;
                print-time yes;
                print-category yes;
        };
        category "default" { namedlog; };
        category "general" { namedlog; };
        category "database" { namedlog; };
        category "security" { namedlog; };
        category "config" { namedlog; };
        category "resolver" { namedlog; };
        category "client" { namedlog; };
        category "unmatched" { namedlog; };
        category "queries" { namedlog; };
};

zone "XXXXXXXXXX.XXX" in {
        type master;
        file "db.XXXXXXXX.XXX";
};

key "rndc-key" {
        algorithm hmac-md5;
        secret "XXXXX";
};

controls {
        inet 127.0.0.1 port 953
        allow { 127.0.0.1; } keys { "rndc-key"; };
};

I'm running bind 9.2.1 on a RedHat 7.3 server.

any help is appreciated, Thanks in advance.

Jeff
JerfAsked:
Who is Participating?
 
smiskCommented:
I'm no expert on bind, but I believe dig uses UDP ports for requests.  Try opening port 53/UDP.
0
 
JerfAuthor Commented:
Forgot to mention - this is running on my firewall (small correction - it's a 7.2 server) which is running on a DSL line (ppp0).  I have an internal interface (eth1) and the external interface (eth0 + ppp0).  The server is responding on eth1, but not the others.
0
 
JerfAuthor Commented:
yeah - that'll do it.

Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.