Re: Problem with name resolving

2011-07-02 Thread Markus Feldmann

Am 01.07.2011 22:43, schrieb Lyle Giese:

On 07/01/11 14:13, Markus Feldmann wrote:

Am 01.07.2011 18:35, schrieb Lyle Giese:

You are right in that you only need one host at dyndns.org to update
your ip address, but you want to have two different websites. The proper
way to do that is with CNAME entries pointing to the host you are
updating at connect time.


Do i need to open my firewall for port 53? :-( Is there another way?
maybe to add two virtual hosts at dyndns.org with the same IP?

regards Markus



I don't know dyndns.com services that well. I don't know what they
support or do not support directly.

Using an example, I have lcrcomputer.com. If I setup a dynamic dns host
with dyndns.org and wanted two host names pointing there, I would do this:

1) setup a dynamic host at dyndns: host.dyndns.org

2) in the LCRCOMPUTER.COM zone I would add two entries:

host1.lcrcomputer.com. in cname host.dyndns.org.
host2.lcrcomputer.com. in cname host.dyndns.org.


In which zone file? db.feldland.lan or in db.192.168.0 ? or in both?

And would it be possible to only allow the DNS-Server at dyndns.org and 
my provider to contact my bind9 server and not to the rest of the world? 
Or does it make no sense for name resolving?


regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-02 Thread Markus Feldmann

Am 01.07.2011 22:43, schrieb Lyle Giese:

I don't know dyndns.com services that well. I don't know what they
support or do not support directly.
I added two Hosts at dyndns.org test-feldland.dyndns.org and 
feldland.dyndns.org both would have the same IP, could this work?


At the weekend my server is down.

regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-02 Thread Lyle Giese

On 07/02/11 04:48, Markus Feldmann wrote:

Am 01.07.2011 22:43, schrieb Lyle Giese:

I don't know dyndns.com services that well. I don't know what they
support or do not support directly.

I added two Hosts at dyndns.org test-feldland.dyndns.org and
feldland.dyndns.org both would have the same IP, could this work?

At the weekend my server is down.



Again, I am not 100% familar with dyndns's Terms of Services.  I do not 
know if you have a free or paid account with them, it matters in what 
TOS you fall under.


As long as dyndns has the correct ip address in their database and are 
willing to serve that data, yes you could reach your web services via 
feldland.dyndns.org and test-feldland.dyndns.org.  You may have to 
adjust your virtual host settings accordingly, but that is outside the 
scope of this list.


Lyle Giese
LCR Computer Services, Inc.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-02 Thread Lyle Giese

On 07/02/11 04:37, Markus Feldmann wrote:

Am 01.07.2011 22:43, schrieb Lyle Giese:

On 07/01/11 14:13, Markus Feldmann wrote:

Am 01.07.2011 18:35, schrieb Lyle Giese:

You are right in that you only need one host at dyndns.org to update
your ip address, but you want to have two different websites. The
proper
way to do that is with CNAME entries pointing to the host you are
updating at connect time.


Do i need to open my firewall for port 53? :-( Is there another way?
maybe to add two virtual hosts at dyndns.org with the same IP?

regards Markus



I don't know dyndns.com services that well. I don't know what they
support or do not support directly.

Using an example, I have lcrcomputer.com. If I setup a dynamic dns host
with dyndns.org and wanted two host names pointing there, I would do
this:

1) setup a dynamic host at dyndns: host.dyndns.org

2) in the LCRCOMPUTER.COM zone I would add two entries:

host1.lcrcomputer.com. in cname host.dyndns.org.
host2.lcrcomputer.com. in cname host.dyndns.org.


In which zone file? db.feldland.lan or in db.192.168.0 ? or in both?



db.192.168.0 is for reverse lookups.  Mapping ip addresses to a host 
name.  192.168.0.x is part of RFC1918 reserved ip addresses and should 
never be exposed to the Internet.


db.feldland.lan is a private internal to your lan domain that is not 
registered anywhere and therefore nobody out on the Internet should be 
looking for hosts there.


In my example, LCRCOMPUTER.COM is a legal and registered domain name on 
the Internet.



And would it be possible to only allow the DNS-Server at dyndns.org and
my provider to contact my bind9 server and not to the rest of the world?
Or does it make no sense for name resolving?



We have not established a sane question for them to ask of your name server.

Lyle Giese
LCR Computer Services, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Problem with name resolving

2011-07-01 Thread Markus Feldmann

Hi All,

i have a private Network with a Debian Lenny Server/Router and the 
Services BIND9.7.3(DDNS)/DHCP4.1.1/PPPOE3.8/CUPS1.4.4/APACHE2.2.16 and 
Kernel 2.6.37.2.


My Problem is that he can not resolve himself and regardless from which 
PC i do a ping i can not resolve my two name-based-virtual hosts. 
Furhter on i do not know how to setup my network at the best dynamically?


When my pppd program dials in it gets two nameservers which he shall 
save in /etc/resolv.conf or not? When i save this two nameservers in 
/etc/resolv.conf i have problem too resolve my local network, but when 
pppoe does not save these two nameservers, i have problem to resolve 
internet names from my server view.


Further on i can not reach my two virtual Apache Hosts 
www.feldland.dyndns.org, test.feldland.dyndns.org, but i can reach 
feldland.dyndns.org which leads me to test.dyndns.org.


Here are my named-based-virtual hosts defind with port 80:
/etc/apache2/sites-enabled/umleiten -- http://paste.pocoo.org/show/425695/
All request will be redirected to Port 443:
cat /etc/apache2/sites-enabled/standard-ssl -- http://pastebin.com/BPZDTMGF

DDNS/DHCP-Service seems to work. So i post not all configs but only the 
involved configs i think.


/etc/resolv.conf:
domain feldland.lan
search feldland.lan
nameserver 0.0.0.0
nameserver 192.168.2.1

/etc/host.conf:
order hosts,bind
multi on

/hostname:
feld-server

/etc/hosts:
127.0.0.1   localhost
192.168.0.186   feld-server.feldland.lanfeld-server

/etc/networks:
default 0.0.0.0
loopback127.0.0.0
link-local  169.254.0.0

My DNS-server shall only be presentative for my local network regardless 
from which Client or Server in my Network and all other Internet request 
shall be redirected to my Arcor DNS Server.


Further on i post some commands which evidence my problem:
Some nslookup -- http://pastebin.com/aLKay6F9
Some dig -- http://pastebin.com/WfCrssMD

Any hints or ideas?

regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Markus Feldmann

Correction, my server can see himself localy, for example:
feld-server:/var/www# ping -R -c 1 feld-server
PING feld-server.feldland.lan (192.168.0.186) 56(124) bytes of data.
64 bytes from feld-server.feldland.lan (192.168.0.186): icmp_req=1 
ttl=64 time=0.090 ms

RR: feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)


--- feld-server.feldland.lan ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.090/0.090/0.090/0.000 ms

feld-server:/var/www# ping -R -c 1 feldland.dyndns.org
PING feldland.dyndns.org (92.76.235.61) 56(124) bytes of data.
64 bytes from dslb-092-076-235-061.pools.arcor-ip.net (92.76.235.61): 
icmp_req=1 ttl=64 time=0.077 ms

RR: dslb-092-076-235-061.pools.arcor-ip.net (92.76.235.61)
dslb-092-076-235-061.pools.arcor-ip.net (92.76.235.61)
dslb-092-076-235-061.pools.arcor-ip.net (92.76.235.61)
dslb-092-076-235-061.pools.arcor-ip.net (92.76.235.61)


--- feldland.dyndns.org ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.077/0.077/0.077/0.000 ms

But this does not work:
feld-server:/var/www# ping -R -c 1 test.feldland.dyndns.org
ping: unknown host test.feldland.dyndns.org
feld-server:/var/www# ping -R -c 1 www.feldland.dyndns.org
ping: unknown host www.feldland.dyndns.org

My server can still see the other local clients.

regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Lyle Giese

On 07/01/11 05:02, Markus Feldmann wrote:

Hi All,

i have a private Network with a Debian Lenny Server/Router and the
Services BIND9.7.3(DDNS)/DHCP4.1.1/PPPOE3.8/CUPS1.4.4/APACHE2.2.16 and
Kernel 2.6.37.2.

My Problem is that he can not resolve himself and regardless from which
PC i do a ping i can not resolve my two name-based-virtual hosts.
Furhter on i do not know how to setup my network at the best dynamically?

When my pppd program dials in it gets two nameservers which he shall
save in /etc/resolv.conf or not? When i save this two nameservers in
/etc/resolv.conf i have problem too resolve my local network, but when
pppoe does not save these two nameservers, i have problem to resolve
internet names from my server view.

Further on i can not reach my two virtual Apache Hosts
www.feldland.dyndns.org, test.feldland.dyndns.org, but i can reach
feldland.dyndns.org which leads me to test.dyndns.org.

Here are my named-based-virtual hosts defind with port 80:
/etc/apache2/sites-enabled/umleiten -- http://paste.pocoo.org/show/425695/
All request will be redirected to Port 443:
cat /etc/apache2/sites-enabled/standard-ssl --
http://pastebin.com/BPZDTMGF

DDNS/DHCP-Service seems to work. So i post not all configs but only the
involved configs i think.

/etc/resolv.conf:
domain feldland.lan
search feldland.lan
nameserver 0.0.0.0
nameserver 192.168.2.1

/etc/host.conf:
order hosts,bind
multi on

/hostname:
feld-server

/etc/hosts:
127.0.0.1 localhost
192.168.0.186 feld-server.feldland.lan feld-server

/etc/networks:
default 0.0.0.0
loopback 127.0.0.0
link-local 169.254.0.0

My DNS-server shall only be presentative for my local network regardless
from which Client or Server in my Network and all other Internet request
shall be redirected to my Arcor DNS Server.

Further on i post some commands which evidence my problem:
Some nslookup -- http://pastebin.com/aLKay6F9
Some dig -- http://pastebin.com/WfCrssMD

Any hints or ideas?

regards Markus


Markus,
To be sure, you know that nslookup and dig do NOT use the search 
parameter in /etc/resolv.conf.  So when you do an nslookup or dig query, 
you have to use the fully qualified domain name(FQDN).


PING uses the search parameter in /etc/resolv.conf, so that can be a 
source of confusion for you.


You have not posted your named.conf or the contents of any local zone 
files you may be using.  Those are important for troubleshooting this issue.


It would appear that you setup the dyndns client on your debian box to 
update feldland.dyndns.org.  But how and where do you update the other 
two?  www.feldland.dyndns.org and test.feldland.dyndns.org


Or did you forget to create those at dyndns.org?

Lyle Giese
LCR Computer Services, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Markus Feldmann

Am 01.07.2011 14:51, schrieb Lyle Giese:

Markus,
To be sure, you know that nslookup and dig do NOT use the search
parameter in /etc/resolv.conf. So when you do an nslookup or dig query,
you have to use the fully qualified domain name(FQDN).

PING uses the search parameter in /etc/resolv.conf, so that can be a
source of confusion for you.

Here some ping outputs from my servers view:
feld-server:~# ping -R -c 1 feld-server
PING feld-server.feldland.lan (192.168.0.186) 56(124) bytes of data.
64 bytes from feld-server.feldland.lan (192.168.0.186): icmp_req=1 
ttl=64 time=0.124 ms

RR: feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)
feld-server.feldland.lan (192.168.0.186)


--- feld-server.feldland.lan ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.124/0.124/0.124/0.000 ms

But the next doesn't work correctly, he needs some time, but however 
knows the IP of my client.

feld-server:~# ping -R -c 1 feld-bertlap
PING feld-bertlap.feldland.lan (192.168.0.212) 56(124) bytes of data.

--- feld-bertlap.feldland.lan ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms


feld-server:~# ping -R -c 1 feldland.dyndns.org
PING feldland.dyndns.org (92.76.247.153) 56(124) bytes of data.
64 bytes from dslb-092-076-247-153.pools.arcor-ip.net (92.76.247.153): 
icmp_req=1 ttl=64 time=0.133 ms

RR: dslb-092-076-247-153.pools.arcor-ip.net (92.76.247.153)
dslb-092-076-247-153.pools.arcor-ip.net (92.76.247.153)
dslb-092-076-247-153.pools.arcor-ip.net (92.76.247.153)
dslb-092-076-247-153.pools.arcor-ip.net (92.76.247.153)


--- feldland.dyndns.org ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.133/0.133/0.133/0.000 ms

But these next doesn't work too:
feld-server:~# ping -R -c 1 test.feldland.dyndns.org
ping: unknown host test.feldland.dyndns.org
feld-server:~# ping -R -c 1 www.feldland.dyndns.org
ping: unknown host www.feldland.dyndns.org




You have not posted your named.conf or the contents of any local zone
files you may be using. Those are important for troubleshooting this issue.

Yes here are some:
named.conf -- http://pastebin.com/eAQtvg3U
named.conf.local -- http://pastebin.com/ivWtzDLr
named.conf.options -- http://pastebin.com/zxHVEugz
db.feldland.lan -- http://pastebin.com/JZxkMKzd
db.192.168.0 -- http://pastebin.com/QJgCnJ1m


It would appear that you setup the dyndns client on your debian box to
update feldland.dyndns.org. But how and where do you update the other
two? www.feldland.dyndns.org and test.feldland.dyndns.org

Or did you forget to create those at dyndns.org?
Because i am using one Ip for two sites i do not have to register more 
than one host. yes its confusing me :-) I am not sure which of my 
services resolve the names correctly, but because of the fact i 
registered only feldland.dyndns.org at dyndns.org, i think i have to 
solve the problem in my network localy and not at dyndns.org


my /etc/ddclient.conf:
# Configuration file for ddclient generated by debconf
#
# /etc/ddclient.conf

pid=/var/run/ddclient.pid
protocol=dyndns2
use=if, if=ppp0
server=members.dyndns.org
login=yyy
password=xxx
feldland.dyndns.org

Regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Lyle Giese

On 07/01/11 08:50, Markus Feldmann wrote:

Am 01.07.2011 14:51, schrieb Lyle Giese:

Markus,
To be sure, you know that nslookup and dig do NOT use the search
parameter in /etc/resolv.conf. So when you do an nslookup or dig query,
you have to use the fully qualified domain name(FQDN).

PING uses the search parameter in /etc/resolv.conf, so that can be a
source of confusion for you.


Don't really care about ping outputs.  You are asking about name 
resolution with your bind server.  I don't care about ping because it 
uses some methods that are outside of DNS.  Like checking your hosts 
file and adding the search domains.


I will only comment on DIG outputs.  NSLOOKUP is better than PING, but 
does not post as much diagnostic output as DIG.  So when 
troubleshooting, DIG is the best option.



It would appear that you setup the dyndns client on your debian box to
update feldland.dyndns.org. But how and where do you update the other
two? www.feldland.dyndns.org and test.feldland.dyndns.org

Or did you forget to create those at dyndns.org?



Because i am using one Ip for two sites i do not have to register more
than one host. yes its confusing me :-) I am not sure which of my
services resolve the names correctly, but because of the fact i
registered only feldland.dyndns.org at dyndns.org, i think i have to
solve the problem in my network localy and not at dyndns.org


You are right in that you only need one host at dyndns.org to update 
your ip address, but you want to have two different websites.  The 
proper way to do that is with CNAME entries pointing to the host you are 
updating at connect time.


Lyle Giese
LCR Computer Services, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Markus Feldmann

Am 01.07.2011 18:35, schrieb Lyle Giese:

You are right in that you only need one host at dyndns.org to update
your ip address, but you want to have two different websites. The proper
way to do that is with CNAME entries pointing to the host you are
updating at connect time.

Do i need to open my firewall for port 53? :-( Is there another way? 
maybe to add two virtual hosts at dyndns.org with the same IP?


regards Markus

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Problem with name resolving

2011-07-01 Thread Lyle Giese

On 07/01/11 14:13, Markus Feldmann wrote:

Am 01.07.2011 18:35, schrieb Lyle Giese:

You are right in that you only need one host at dyndns.org to update
your ip address, but you want to have two different websites. The proper
way to do that is with CNAME entries pointing to the host you are
updating at connect time.


Do i need to open my firewall for port 53? :-( Is there another way?
maybe to add two virtual hosts at dyndns.org with the same IP?

regards Markus



I don't know dyndns.com services that well.  I don't know what they 
support or do not support directly.


Using an example, I have lcrcomputer.com.  If I setup a dynamic dns host 
with dyndns.org and wanted two host names pointing there, I would do this:


1) setup a dynamic host at dyndns:  host.dyndns.org

2) in the LCRCOMPUTER.COM zone I would add two entries:

host1.lcrcomputer.com. in cname host.dyndns.org.
host2.lcrcomputer.com. in cname host.dyndns.org.


I don't know if dyndns.com will allow you to create cname entries in 
their zones.  They will if you have a hosted domain name there.


You need to open udp and tcp port 53 only if you need to make your dns 
server available to the public Internet.  If it's only for internal use, 
no.  And besides, if you want to run a public name server, it needs to 
be on a static IP address and not on a dynamic ip address.


Lyle Giese
LCR Computer Services, Inc.

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users