Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-22 Thread Barry Margolin
In article , Matus UHLAR - fantomas wrote: > On 21.09.09 19:26, Shi Jin wrote: > > I've confirmed that the problem is firewall related. I've replaced my > > current Untangle firewall with a simplest Linux NAT iptables firewall and > > everything works perfectly, without any complains. > > I'd s

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-22 Thread Matus UHLAR - fantomas
On 21.09.09 19:26, Shi Jin wrote: > I've confirmed that the problem is firewall related. I've replaced my > current Untangle firewall with a simplest Linux NAT iptables firewall and > everything works perfectly, without any complains. I'd say it was bad configuration, not necessarily a bad firewal

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Shi Jin
Thank you all. I've confirmed that the problem is firewall related. I've replaced my current Untangle firewall with a simplest Linux NAT iptables firewall and everything works perfectly, without any complains. Thank you very much for your kind help/suggestions. Shi

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Kevin Darcy
1) Confirm whether you need to forward at all. If you don't need to, then remove the forwarders entries and that should take care of the errors in your log. 2) If you *must* use forwarders, look at the part of the config that you didn't show us, and determine whether there is something there (e.

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Mark Andrews
In message <865284.37771...@web36203.mail.mud.yahoo.com>, Shi Jin writes: > > > "host unreachable" is one of the clearer error messages, so > > you need > > to do some digging. From the box that you've set up bind9 > > on you'll > > need to use dig to query the ISP's name servers. If that > > wor

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Shi Jin
> "host unreachable" is one of the clearer error messages, so > you need > to do some digging. From the box that you've set up bind9 > on you'll > need to use dig to query the ISP's name servers. If that > works, then > you'll have to use tcpdump on that box to find out what > named is doing. > >

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Doug Barton
Shi Jin wrote: > Hi there, > > I've setup a DNS server running bind9 in my LAN and set it up to ISP provided > DNS servers as the forwarders. Currently this DNS server works in the sense > both internal and external names are resolved without any problem. However, > for each DNS query, the sysl

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Shi Jin
> Try > dig @216.171.238.66 hp.com > to see if the .66 host answers to your queries. Maybe you > got a wrong IP > there? Try the same for .67, the other DNS. > Thank you very much. I tried what you suggested and it seems that these two servers work perfectly. In fact, I can simply set my DNS t

Re: DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Michael Monnerie
On Montag 21 September 2009 Shi Jin wrote: > However, it looks to me like the ISP provided DNS server > (216.171.238.66) was not able to resolve any of the names and all the > resolving is done at the top level servers. Is my understanding > correct? Try dig @216.171.238.66 hp.com to see if the .6

DNS server works but keep getting "host unreachable resolving" error

2009-09-21 Thread Shi Jin
Hi there, I've setup a DNS server running bind9 in my LAN and set it up to ISP provided DNS servers as the forwarders. Currently this DNS server works in the sense both internal and external names are resolved without any problem. However, for each DNS query, the syslog shows entries of dhcp-