On Mon, Dec 07, 2009 at 01:56:06AM +0200, Andrei Popescu wrote:
> On Sun,06.Dec.09, 15:39:59, Andrew Sackville-West wrote:
> > 
> > there are clearly some differences. the lenny machine is making a 
> > AAAA? request (whatever that means) while the squeeze machine is 
> > making both a A? and AAAA? requests. And the responses are different. 
> > This behavior is consistent across attempts.
> 
> This sounds like an ipv4/ipv6 issue. Maybe this NEWS.Debian entry for
> libc6 has the solution:
> 
> glibc (2.9-8) unstable; urgency=low
> 
>   Starting with version 2.9-8, unified IPv4/IPv6 lookup have been enabled
>   in the glibc's resolver. This is faster, fixes numerous of bugs, but is
>   problematic on some broken DNS servers and/or wrongly configured 
>   firewalls. 
>   
>   If such a DNS server is detected, the resolver switches (permanently
>   for that process) to a mode where the second request is sent only when
>   the first answer has been received. This means the first request will
>   be timeout, but subsequent requests should be fast again. This 
>   behaviour can be enabled permanently by adding 'options single-request'
>   to /etc/resolv.conf.  

Andrei, I owe you a beer!

That's done it right there. Now it's just a matter of figuring out
whether it's my firewall or my dns server that's broken... :)

A

Attachment: signature.asc
Description: Digital signature

Reply via email to