Re: BIND: Lookup of CNAME records

From: Crist J. Clark (cristjc_at_comcast.net)
Date: 03/19/04

  • Next message: Holger Eitzenberger: "IPsec: problems after upgrade 4.8 to 4.9" 
    Date: Fri, 19 Mar 2004 11:35:14 -0800
To: 789456123@gmx.de

    On Fri, Mar 19, 2004 at 02:54:37AM +0100, 789456123@gmx.de wrote:
    > I have set up a FreeBSD (5.2.1-RELEASE) box acting as a gateway and
    > running version 8.3.7-REL of BIND. For testing purposes my
    > configuration file looks as follows:
    >
    > options {
    > directory "/etc/namedb";
    > pid-file "/var/run/named/pid";
    >
    > forward only;
    >
    > forwarders {
    > 195.62.99.42;
    > 195.62.97.177;
    > };
    >
    > query-source address * port 53;
    > };
    >
    > zone "." {
    > type hint;
    > file "named.root";
    > };
    >
    > This setup (actually a replacement for just adding the two nameservers
    > to resolv.conf) works fine with lookup tools like "host", "nslookup",
    > or "dnsquery". However, when I try to telnet or ftp a server whose
    > name is a CNAME record, it takes about 77 seconds until the lookup is
    > complete. This appears quite odd to me, as "host" does the lookup
    > perfectly well and fast. Connections to A name records are no problem
    > however.

    How long does it take to do a reverse-lookup on the result of the
    previous lookups? The applications may be trying to resolve a PTR
    record for the final IP address they end up with.

    > My first assumption was that "ftp" or "telnet" were not doing lookups
    > properly. But modifying resolv.conf in a way that it uses the two
    > nameservers directly (instead of the local nameserver) solved the
    > CNAME lookup problem.

    Strange. The first issue wouldn't really explain that. You can try the
    following two tests and compare the difference,

      1) Put the two external servers in resolv.conf, and run,

            # tcpdump -s512 port 53

         And try your ftp or telnet.

      2) Put 127.0.0.1 back into resolv.conf, clear the cache of the local
         BIND (not sure of a way to do that other than killing and
         restarting in 8.x.x), and run the same thing,

            # tcpdump -s512 port 53

         And again try the ftp or telnet. 

    -- 
Crist J. Clark                     |     cjclark@alum.mit.edu
                                   |     cjclark@jhu.edu
http://people.freebsd.org/~cjc/    |     cjc@freebsd.org
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Holger Eitzenberger: "IPsec: problems after upgrade 4.8 to 4.9"

    Relevant Pages

    • Re: Bind my dataset to combo lookups?
      ... With text fields I can bind them no problems, ... But with the combos, the value ... "Morten Wennevik" wrote: ... full of lookup descriptions. ...
      (microsoft.public.dotnet.general)
    • BIND: Lookup of CNAME records
      ... This setup (actually a replacement for just adding the two nameservers ... to resolv.conf) works fine with lookup tools like "host", "nslookup", ... name is a CNAME record, it takes about 77 seconds until the lookup is ... the LAN (they use the FreeBSD box as their nameserver) do work with A ...
      (freebsd-net)
    • Re: Bind my dataset to combo lookups?
      ... Correct me if I'm wrong, but I'm guessing you have an ID field in your row representing data from another table and want the id number translated to this data, with the ComboBox selection tied to that table (Lookup Table). ... With text fields I can bind them no problems, and the value is displayed nice and easy. ... Happy coding! ...
      (microsoft.public.dotnet.general)
    • BIND: Lookup of CNAME records
      ... This setup (actually a replacement for just adding the two nameservers ... to resolv.conf) works fine with lookup tools like "host", "nslookup", ... name is a CNAME record, it takes about 77 seconds until the lookup is ... the LAN (they use the FreeBSD box as their nameserver) do work with A ...
      (comp.unix.bsd.freebsd.misc)
    • Re: BIND
      ... Subject: BIND ... > Sort of in this vein, is anyone here using djbdns in a large ISP ... Haven't worked at a large ISP environment, ... to pull via AXFR from your BIND nameservers. ...
      (Focus-SUN)