Try djbdns...
2011/8/6, Maxwell Smart <[email protected]>:
> Scott Hughes wrote:
>>
>> Yes. That are. I don't want anyone being able to resolve anything other
>> that what I provide.
>>
>> I do want to use dig and nslookup on the console / ssh session.
>>
>> Scott
>>
>>
> I see, that's a bit different setup than mine. Your acting as the gate
> keeper. I think you need to allow just that machine in a container in order
> to resolve outside DNS.
>>
>>
>>
>> On Aug 6, 2011, at 11:06 PM, Maxwell Smart <[email protected]> wrote:
>>
>>> Scott Hughes wrote:
>>>>
>>>> I believe so. If it's not I'm gonna feel really stupid! lol
>>>> I'll chech it in the AM. I do know that outside people can resolve ok.
>>>>
>>>> Scott
>>>>
>>>>
>>>> On Aug 6, 2011, at 10:04 PM, Maxwell Smart <[email protected]> wrote:
>>>>
>>>>> Scott Hughes wrote:
>>>>>>
>>>>>> For some weird reason my DNS (not on qmail) is not forwarding requests
>>>>>> for zones that aren't in it's zone files (like google.com). If I
>>>>>> 'dig' one of my zones, I get all the correct information. If I 'dig'
>>>>>> something like www.google.com I get nothing. Here are the two files
>>>>>> that I think control this:
>>>>>>
>>>>>> # cat resolv.conf
>>>>>> search renshawauto.org
>>>>>> nameserver 66.255.244.213
>>>>>> nameserver 127.0.0.1
>>>>>>
>>>>>> NOTE: Both of these IPs are the same interface. I used to just have
>>>>>> the 127.0.0.1 and nothing else, so I tried the live IP to see if that
>>>>>> would help
>>>>>>
>>>>>>
>>>>>>
>>>>>> # cat named.conf
>>>>>> //
>>>>>> // named.conf
>>>>>> //
>>>>>> // Provided by Red Hat bind package to configure the ISC BIND named(8)
>>>>>> DNS
>>>>>> // server as a caching only nameserver (as a localhost DNS resolver
>>>>>> only).
>>>>>> //
>>>>>> // See /usr/share/doc/bind*/sample/ for example named configuration
>>>>>> files.
>>>>>> //
>>>>>> options {
>>>>>> listen-on port 53 { 127.0.0.1; };
>>>>>> listen-on port 53 { 66.255.244.213; };
>>>>>> # listen-on-v6 port 53 { ::1; };
>>>>>> allow-query { 127.0.0.1; 66.255.244.213; };
>>>>>> allow-recursion { 127.0.0.1; 66.255.244.213; };
>>>>>> directory "/var/named/chroot/var/named";
>>>>>> forward first;
>>>>>> forwarders { 8.8.8.8; 8.8.4.4; };
>>>>>> dump-file
>>>>>> "/var/named/chroot/var/named/data/cache_dump.db";
>>>>>> statistics-file
>>>>>> "/var/named/chroot/var/named/data/named_stats.txt";
>>>>>> memstatistics-file
>>>>>> "/var/named/chroot/var/named/data/named_mem_stats.txt";
>>>>>> // allow-query { 127.0.0.1; 66.255.244.213; localhost; };
>>>>>> recursion no;
>>>>>> transfers-out 100;
>>>>>> };
>>>>>>
>>>>>> logging {
>>>>>> channel default_debug {
>>>>>> file "data/named.run";
>>>>>> severity dynamic;
>>>>>> };
>>>>>> };
>>>>>> zone "." IN {
>>>>>> type hint;
>>>>>> file "/var/named/chroot/var/named/named.root";
>>>>>> };
>>>>>> include "/var/named/chroot/etc/named.conf.local";
>>>>>>
>>>>>>
>>>>>> Any ideas? I've been searching on Google for HOURS on this one. I
>>>>>> even replaced my named.root file with the latest from Internic, No
>>>>>> Joy! If I put an outside DNS server into the resolv.conf then it will
>>>>>> work probably, but the forwarders in the named.conf should do this!
>>>>>>
>>>>>> Thanks,
>>>>>> Scott
>>>>>>
>>>>> Firewall port 53 open?
>>>>>
>>>>> --
>>>>> Cecil Yother, Jr. "cj"
>>>>> cj's
>>>>> 2318 Clement Ave
>>>>> Alameda, CA 94501
>>>>>
>>>>> tel 510.865.2787
>>>>> http://yother.com
>>>>> Check out the new Volvo classified resource
>>>>> http://www.volvoclassified.com
>>>>>
>>>>> ---------------------------------------------------------------------------------
>>>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>>>> (www.vickersconsulting.com) Vickers Consulting Group offers
>>>>> Qmailtoaster support and installations. If you need professional help
>>>>> with your setup, contact them today!
>>>>> ---------------------------------------------------------------------------------
>>>>> Please visit qmailtoaster.com for the latest news, updates, and
>>>>> packages. To unsubscribe, e-mail:
>>>>> [email protected] For additional commands,
>>>>> e-mail: [email protected]
>>>
>>> Are they using your server as their authoritative server?
>>>
>>> ---------------------------------------------------------------------------------
>>> Qmailtoaster is sponsored by Vickers Consulting Group
>>> (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
>>> support and installations. If you need professional help with your setup,
>>> contact them today!
>>> ---------------------------------------------------------------------------------
>>> Please visit qmailtoaster.com for the latest news, updates, and packages.
>>> To unsubscribe, e-mail: [email protected]
>>> For additional commands, e-mail: [email protected]
>
>
>
> --
> Cecil Yother, Jr. "cj"
> cj's
> 2318 Clement Ave
> Alameda, CA 94501
>
> tel 510.865.2787
> http://yother.com
> Check out the new Volvo classified resource http://www.volvoclassified.com
>
> ---------------------------------------------------------------------------------
> Qmailtoaster is sponsored by Vickers Consulting Group
> (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster
> support and installations. If you need professional help with your setup,
> contact them today!
> ---------------------------------------------------------------------------------
> Please visit qmailtoaster.com for the latest news, updates, and packages. To
> unsubscribe, e-mail: [email protected] For
> additional commands, e-mail: [email protected]
--
Enviado desde mi dispositivo móvil
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
