-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 7-12-2009 1:15, Andrew Sackville-West wrote: > On Sun, Dec 06, 2009 at 04:08:11PM -0800, Andrew Sackville-West wrote: >> On Mon, Dec 07, 2009 at 01:56:06AM +0200, Andrei Popescu wrote: >>> On Sun,06.Dec.09, 15:39:59, Andrew Sackville-West wrote: >>>> >>>> there are clearly some differences. the lenny machine is making a >>>> AAAA? request (whatever that means) while the squeeze machine is >>>> making both a A? and AAAA? requests. And the responses are different. >>>> This behavior is consistent across attempts. >>> >>> This sounds like an ipv4/ipv6 issue. Maybe this NEWS.Debian entry for >>> libc6 has the solution: >>> >>> glibc (2.9-8) unstable; urgency=low >>> >>> Starting with version 2.9-8, unified IPv4/IPv6 lookup have been enabled >>> in the glibc's resolver. This is faster, fixes numerous of bugs, but is >>> problematic on some broken DNS servers and/or wrongly configured >>> firewalls. >>> >>> If such a DNS server is detected, the resolver switches (permanently >>> for that process) to a mode where the second request is sent only when >>> the first answer has been received. This means the first request will >>> be timeout, but subsequent requests should be fast again. This >>> behaviour can be enabled permanently by adding 'options single-request' >>> to /etc/resolv.conf. >> >> Andrei, I owe you a beer! >> >> That's done it right there. Now it's just a matter of figuring out >> whether it's my firewall or my dns server that's broken... :) > > blech... it's my firewall, or several public dns servers are broken... > > A
How did you go about checking this? I use OpenDNS as dns servers and no other firewall than what comes with Debian by default. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.12 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAksczc0ACgkQkPq5zKsAFii8pACcCLr4D4x+WitQSKlDogWz8+HM 4PgAniK/QKcewFlpdFOo1VQnTzM6l7nq =IfIE -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
