DNS lookups gone on coffee break

[David A. Bandel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 23 Dec 2003 11:40:50 -0600
Shawn L Johnston <sjohnston at satshot.com> wrote:

> I've been seeing a few weird dns problems on my network over the last
> few weeks. A couple of sites won't resolve: www.opengl.org,
> linuxworld.com, and a few others. I know that these sites are up and
> running because if I access them through a different network or if I
> use a DNS server that is on another network I can resolve them.
> 
> Trying an nslookup on www.opengl.org through my dns servers results in
> a connection time out. However if I do an nslookup on www.opengl.org's
> ip address (192.48.159.181) through my dns servers I recieve a
> response 
> 
> Non-authoritative answer:
> 181.159.48.192.in-addr.arpa     name = www.opengl.org.
> 
> We switched our T-1 provider about a month ago and I suspect that I
> haven't configured something correctly when I changed the ip addresses
> for the DNS servers. 
> 
> 
> The weird thing is most external sites reslove without any problems.
> Because I'm starting to notice it now though (as opposed to when I
> switched the network) I think the problem is gradually getting worse.
> 
> I'm running bind 9.2 on linux. I've enabled the querylog feature but I
> haven't seen any information in the logs thats helped me figure out
> whats going on. I'm not running any caching server.
> 
> Any thoughts, suggestions?

when you changed IPs did you stop then restart bind?
do you have split horizon configured?
is either horizon non-recursive?

can you post your named.conf (no need to include your zones, and please
xxx out the rndc key)?
when is the last time you updated your hints zone: dig
@b.root-servers.net > named.root ?

Ciao,

David A. Bandel
- -- 
Focus on the dream, not the competition.
		Nemesis Racing Team motto
GPG key autoresponder:  mailto:david_key at pananix.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/6JbUj31PLQNUbV4RAvATAJ9IZcB4XuLynIeohvzHasB1/I2CeQCfQEn2
01uLCa+wArkf+YKVywQOXVM=
=hinQ
-----END PGP SIGNATURE-----