Dotaz: bind, nejde ping na domenu

[kafi]

Pekny podvecer, mam rozjety DNS server Bind. U registratora domeny mam nastaveno a veskere dotazy na mou domenu posila na muj server. Ping ze serveru na kompy a jejich symbolicky tvar (napr. kobliha.fuj.com) jde bez problemu, na serveru ping na hlavni domenu fuj.com jde taky. Ale kdyz chci z klientskeho pc dat ping na fuj.com tak mi napise ze nenasel tuto domenu, ale ping na maso.fuj.com jde. Nevite kde by mohl byt problem? Pri startu bindu neni zadna chybova hlaska. Ve forwardes mam dns sveho poskytovatele internetu. A uz fakt nevym ke by mohla byt chyba. Pokud by to bylo nutne dam sem i konfiguraky bindu. v /etc/hosts mam (mimo localu)

172.16.2.1   srv.fuj.com srv
213.164.xxx.xxx   fuj.com

V host.conf mam aby uprednostnil bind. V resolv.conf mam

search fuj.com
nameserver 127.0.0.1

Odpovědi

[pupu]

A co je v resolv.conf na tech klientech? Nebo jaky maji nastaveny DNS server v sitovych parametrech, pokud jsou to Widle? Neni na serveru zakazany port 53? Co rika tcpdump -n -l port 53 na serveru?

[kafi]

Na klientech je u Widli i Linuxu dan DNS na 172.16.2.1 respektiva na srv.fuj.com. tcpdump jsem jiz zkousel ale bohuzel nic prevratneho z nej nevylezlo, dostal pozadavek a vratil tazately s tim ze u tazatele to hodilo ze nezna fuj.com. I pri uplne vypnutym firewallu se to chova stejne zadna zmena. Kudla to je divne vse jede net jede vse v poho. JInak na klientskem PC s XP kdyz to testnu pres nslookup tak mi pri

set type=a
fuj.com

hodi

server: srv.fuj.com
adresa 172.16.2.1

nazev: fuj.com

[pupu]

Co zkusit set type=any a zopakovat dotaz? Mate vubec A-record pro domenu? Zkuste pripadne misto nslookup-u na serveru dig @localhost - co to vrati? Co presne vypisuje ten tcpdump?

[kafi]

Vypis tcpdumpu:

09:49:53.187433 IP maso.fuj.com.32768 > srv.fuj.com.domain:  38375+ A? fuj.com. (29)
09:49:53.188612 IP srv.fuj.com.domain > maso.fuj.com.32768:  38375* 0/1/0 (77)
09:49:53.188796 IP maso.fuj.com.32768 > srv.fuj.com.domain:  52962+ A? fuj.com.fuj.com. (41)
09:49:53.189655 IP srv.fuj.com.domain > maso.fuj.com.32768:  52962 NXDomain* 0/1/0 (89)

Vypis dig @localhost:

root@srv:~# dig @localhost

; <<>> DiG 9.3.1 <<>> @localhost
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47830
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13

;; QUESTION SECTION:
;.                              IN      NS

;; ANSWER SECTION:
.                       77894   IN      NS      A.ROOT-SERVERS.NET.
.                       77894   IN      NS      B.ROOT-SERVERS.NET.
.                       77894   IN      NS      C.ROOT-SERVERS.NET.
.                       77894   IN      NS      D.ROOT-SERVERS.NET.
.                       77894   IN      NS      E.ROOT-SERVERS.NET.
.                       77894   IN      NS      F.ROOT-SERVERS.NET.
.                       77894   IN      NS      G.ROOT-SERVERS.NET.
.                       77894   IN      NS      H.ROOT-SERVERS.NET.
.                       77894   IN      NS      I.ROOT-SERVERS.NET.
.                       77894   IN      NS      J.ROOT-SERVERS.NET.
.                       77894   IN      NS      K.ROOT-SERVERS.NET.
.                       77894   IN      NS      L.ROOT-SERVERS.NET.
.                       77894   IN      NS      M.ROOT-SERVERS.NET.

;; ADDITIONAL SECTION:
A.ROOT-SERVERS.NET.     164294  IN      A       198.41.0.4
B.ROOT-SERVERS.NET.     164294  IN      A       192.228.79.201
C.ROOT-SERVERS.NET.     164294  IN      A       192.33.4.12
D.ROOT-SERVERS.NET.     164294  IN      A       128.8.10.90
E.ROOT-SERVERS.NET.     164294  IN      A       192.203.230.10
F.ROOT-SERVERS.NET.     164294  IN      A       192.5.5.241
G.ROOT-SERVERS.NET.     164294  IN      A       192.112.36.4
H.ROOT-SERVERS.NET.     164294  IN      A       128.63.2.53
I.ROOT-SERVERS.NET.     164294  IN      A       192.36.148.17
J.ROOT-SERVERS.NET.     164294  IN      A       192.58.128.30
K.ROOT-SERVERS.NET.     164294  IN      A       193.0.14.129
L.ROOT-SERVERS.NET.     164294  IN      A       198.32.64.12
M.ROOT-SERVERS.NET.     164294  IN      A       202.12.27.33

;; Query time: 88 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Nov 25 09:53:39 2006
;; MSG SIZE  rcvd: 436

Jeste dodam z vnejsi site jde domena bez problemu pingnout. To znamena znami u jineho poskytovatele v jinem meste mou dome bez problemu pingne a vrati mu to mou verejnou IP.

[pupu]

'dig @localhost fuj.com' jsem myslel, omlouvam se. Skoro bych se primlouval za odtajneni zaznamu, at se mohu take podivat, co ze to Vas server vlastne vraci a jak je resolving nastaveny. Kdyztak soukrome - treba abc@pupu.cz. Muj osobni tip je, ze A record ve Vasem serveru vubec neexistuje a vraci se pouze SOA. Pak ovsem muze byt problem s delegaci, pripadne s tim, ze lide zvenku dostanou zaznam z cache.

[root@hactar ~]# dig @www.pupu.cz pupu.cz

; <<>> DiG 9.3.1 <<>> @www.pupu.cz pupu.cz ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56261 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION: ;pupu.cz. IN A

;; AUTHORITY SECTION: pupu.cz. 10800 IN SOA dns.iol.cz. hostmaster.iol.cz. 2006051201 10800 3600 3600000 86400

;; Query time: 16 msec ;; SERVER: 194.228.192.234#53(194.228.192.234) ;; WHEN: Sat Nov 25 10:29:55 2006 ;; MSG SIZE rcvd: 80

10:29:55.031975 IP 62.245.71.245.32979 > 194.228.192.234.domain: 56261+ A? pupu.cz. (25) 10:29:55.042530 IP 194.228.192.234.domain > 62.245.71.245.32979: 56261 0/1/0 (80)

[kafi]

Jelikoyz nikoho zatim nic nenapadlo pridavam konfigurak named.conf.Snad nekoho neco napadne.

key "rndc-key" {
       algorithm hmac-md5;
       secret "y2UZu8nWDm3ULEwGDVGqOA==";
};

controls {
       inet 127.0.0.1 port 953
           allow { 127.0.0.1; } keys { "rndc-key"; };
};

options {
        directory "/var/named/";
        pid-file "/var/run/named/named.pid";
        auth-nxdomain yes;
        query-source port 53;

        forwarders {
                213.xxx.xxx.xxx;
                213.xxx.xxx.xxx;
                };

        forward only;
};

logging {
        category lame-servers {null;};
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
};

zone fuj.com {
        type master;
        file "primary/named.fuj.com";
};

zone 2.16.172.in-addr.arpa {
        type master;
        file "primary/named.rev.fuj.com";
};

Prosim pomozte uz nevim kudy kam.