On Fri, 13 Aug 1999, Robert Nicol wrote:
> I also have 2 Windoze 98 machines on my network, and I am
> running sambe on both linux boxes. From time to time, my DNS seems to
> be looking up something, and seems to become totally caught up in doing
> that. (watching the connection Que in dctrl, I can see that it is
> continually asking every server in hints, over and over again)
99% of lookups on the root servers are stupid questions from
stupid Windows machines :-(.
> 1) can my DNS be set up to handle netbios lookups - athouratatively,
> and if so how? That may solve part to the problem.
If you are seeing DNS traffic either the Windows machines are
configured to do DNS look ups or you are seeing samba trying
to satisfy WINS queries by consulting DNS. You can stop samba
forwarding queries to DNS (see "man 5 smb.conf" and search for
"dns"). Of course, stopping DNS look ups could stop your Windows
machines seeing *anything* beyond the local net...
> 2) when a DNS request is what brings up the link... if I have my home
> page set to my local network, could I bypass the dns problem by having a
> link in my home page go to an outside server by ip address (say my home
> directory on my ISP)? That way DNS shouldn't be needed?
Since you mentioned hints you seem to be running a local name
server already so:
1. Make sure *everything* points to the local name server. Not
your ISP's name servers.
2. Make sure /etc/resolv.conf lists *only* 127.0.0.1 otherwise
your local name server may be bypassed.
3. Use the forward option in your name server's config and list
your ISP's name servers.
4. Comment out the hints loading. Your ISP's servers can handle
onward queries. If they aren't running your ISP is probably
down anyway :-).
5. Now you can turn your name server's query logging on and
gaze in awe at the crap that it gets hit with.
6. For advanced users: Tell your name server to act as a master
for domains as necessary. Having it as a master for whatever
you are using as a local domain is useful. It is also useful
to "stub" some obviously bogus domains by having your name
server master them using a file containing nothing but an SOA
record. Remember, if your name server knows it is a master
or slave for the zone it will never forward requests for that
zone.
Mike
--
.----------------------------------------------------------------------.
| Mike Jagdis | Internet: [EMAIL PROTECTED] |
| 280, Silverdale Road, Earley, | Voice: +44 118 926 6996 |
| Reading RG6 7NU ENGLAND | Work: +44 118 989 0403 |
`----------------------------------------------------------------------'
-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]
