Re: Unable to query the nameserver

2010-10-11 Thread Matus UHLAR - fantomas
On 10.10.10 21:03, Doug Barton wrote: http://dougbarton.us/DNS/bind-users-FAQ.html#nslookup-evil nice but I miss there some explanations that were mentioned here, e.g. it sometimes does not query the server user asks for (iirc) Something could be reworded. e.g. uses system libraries that could

Re: Unable to query the nameserver

2010-10-10 Thread Doug Barton
http://dougbarton.us/DNS/bind-users-FAQ.html#nslookup-evil -- Breadth of IT experience, and| Nothin' ever doesn't change, depth of knowledge in the DNS. | but nothin' changes much. Yours for the right price. :) | -- OK Go http://SupersetSolutions.com/

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Darcy
On 10/5/2010 3:49 PM, Dotan Cohen wrote: On Tue, Oct 5, 2010 at 20:30, Eivind Olseneiv...@aminor.no wrote: However, another site that _does_ work (with both nameservers on this host, not just ns1) shows the same thing: # nslookup ns1.sharingserver.eu 178.63.65.136 Server:

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
Date: Wed, 06 Oct 2010 10:35:32 -0400 From: Kevin Darcy k...@chrysler.com Sender: bind-users-bounces+oberman=es@lists.isc.org On 10/5/2010 3:49 PM, Dotan Cohen wrote: On Tue, Oct 5, 2010 at 20:30, Eivind Olseneiv...@aminor.no wrote: However, another site that _does_ work (with

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 1:47 AM, Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Wasn't nslookup already deprecated about ten years or so ago? Regards, Ben signature.asc Description: OpenPGP digital

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
Date: Thu, 07 Oct 2010 01:53:29 +1100 From: Ben McGinnes b...@adversary.org On 7/10/10 1:47 AM, Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Wasn't nslookup already deprecated

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 2:09 AM, Kevin Oberman wrote: I can find nothing in the documentation that states such. If I missed it, I'd appreciate someone pointing me at it. I have some vague memory of seeing messages to that effect when using it on a Solaris system in around 1999. I stopped using it around

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Darcy
On 10/6/2010 11:44 AM, Ben McGinnes wrote: On 7/10/10 2:09 AM, Kevin Oberman wrote: I can find nothing in the documentation that states such. If I missed it, I'd appreciate someone pointing me at it. I have some vague memory of seeing messages to that effect when using it on a

Re: Unable to query the nameserver

2010-10-06 Thread Andrey G. Sergeev (AKA Andris)
Hello Kevin, Wed, 06 Oct 2010 07:47:41 -0700 Kevin Oberman wrote: I keep hoping for a BIND distro that upgrades nslookup(1) to: print STDERR, nslookup(1) has been replaced by host(1)\n; exit 0; Short answer: never. I've been wishing that nslookup would go away since back in BIND-v4

Re: Unable to query the nameserver

2010-10-06 Thread Ben McGinnes
On 7/10/10 4:42 AM, Kevin Darcy wrote: ISC has tried to kill it, but the beast is resilient and won't die. Maybe we should call it a wombat then ... Invocations of nslookup are embedded in thousands of legacy scripts and some folks are unable or unwilling to change them. Nothing quite

Re: Unable to query the nameserver

2010-10-06 Thread Andrey G. Sergeev (AKA Andris)
Hello Kevin, Wed, 06 Oct 2010 13:42:35 -0400 Kevin Darcy wrote: ISC has tried to kill it, but the beast is resilient and won't die. Invocations of nslookup are embedded in thousands of legacy scripts and some folks are unable or unwilling to change them. Well said, Kevin! Just have sent

RE: Unable to query the nameserver

2010-10-06 Thread Lightner, Jeff
McGinnes Sent: Wednesday, October 06, 2010 1:52 PM To: Kevin Darcy Cc: bind-users@lists.isc.org Subject: Re: Unable to query the nameserver On 7/10/10 4:42 AM, Kevin Darcy wrote: ISC has tried to kill it, but the beast is resilient and won't die. Maybe we should call it a wombat

Re: Unable to query the nameserver

2010-10-06 Thread Kevin Oberman
- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Ben McGinnes Sent: Wednesday, October 06, 2010 1:52 PM To: Kevin Darcy Cc: bind-users@lists.isc.org Subject: Re: Unable to query the nameserver On 7/10

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
but when I try to configure my domain name in the registrar's control panel I get this error: Error : Unable to query the nameserver ns1.example.de Hm, you mention in another posting that you're hosting other domains. Are they using the same registrar as the one that's giving you this

Re: Unable to query the nameserver

2010-10-05 Thread Greg Whynott
its as if they think hackers main source of targets comes from here.doesn't appear to really want any help anyway. -g On Oct 4, 2010, at 8:35 PM, Noel Butler wrote: On Mon, 2010-10-04 at 17:29 -0500, Lyle Giese wrote: Dotan Cohen wrote: The ports aren't blocked as another site

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 01:14, Nuno Paquete nunopaqu...@lusocargo.pt wrote: Are your servers running virtualized? No, it's real hardware! -- Dotan Cohen http://gibberish.co.il http://what-is-what.com ___ bind-users mailing list

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Mon, Oct 4, 2010 at 23:37, Greg Whynott greg.whyn...@oicr.on.ca wrote: someone with way more bind clues than I would be able to give you a better answer.    the error returned begs two questions.. 1. is this server behind or running a local firewall? 2. is bind actually listening on the

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 01:03, Nuno Paquete nunopaqu...@lusocargo.pt wrote: Can you successfuly telnet port 53 from an external host? Yes, but it's only a connection. I don't see any output. That' me typing helo: $ telnet 178.63.65.136 53 Trying 178.63.65.136... Connected to 178.63.65.136.

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
--On 5. oktober 2010 20.07.57 +0200 Dotan Cohen dotanco...@gmail.com wrote: # nslookup ns1.sharingserver.de 178.63.65.171 Server: 178.63.65.171 Address:178.63.65.171#53 ** server can't find ns1.sharingserver.de: NXDOMAIN In this case, you're trying to look up

Re: Unable to query the nameserver

2010-10-05 Thread Eivind Olsen
--On 5. oktober 2010 20.20.02 +0200 Dotan Cohen dotanco...@gmail.com wrote: Yes, but it's only a connection. I don't see any output. That' me typing helo: $ telnet 178.63.65.136 53 Trying 178.63.65.136... Connected to 178.63.65.136. Escape character is '^]'. helo USER test ^C^C Connection

Re: Unable to query the nameserver

2010-10-05 Thread Andrey G. Sergeev (AKA Andris)
Hello Dotan, Tue, 5 Oct 2010 20:20:02 +0200 Dotan Cohen wrote: Can you successfuly telnet port 53 from an external host? Yes, but it's only a connection. I don't see any output. That' me typing helo: $ telnet 178.63.65.136 53 Trying 178.63.65.136... Connected to 178.63.65.136. Escape

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 02:35, Noel Butler noel.but...@ausics.net wrote: Quite right, too many people with paranoia come here looking for help but refuse to let us do correct remote testing. First post was 7.08am local, its 3 /12 hours later and we still have no real info, had it been supplied

Re: Unable to query the nameserver

2010-10-05 Thread Andrey G. Sergeev (AKA Andris)
Hello Dotan, Tue, 5 Oct 2010 20:35:24 +0200 Dotan Cohen wrote: The two domains names are sharingcenter.eu and sharingcenter.de. The eu domain has ns1 and ns2 on the same server (IP addresses 178.63.65.136 and 178.63.65.188) and works fine. The de domain has ns1 on this same server (IP

Re: Unable to query the nameserver

2010-10-05 Thread Lyle Giese
Andrey G. Sergeev (AKA Andris) wrote: Hello Dotan, Tue, 5 Oct 2010 20:35:24 +0200 Dotan Cohen wrote: The two domains names are sharingcenter.eu and sharingcenter.de. The eu domain has ns1 and ns2 on the same server (IP addresses 178.63.65.136 and 178.63.65.188) and works fine. The de

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 02:47, Noel Butler noel.but...@ausics.net wrote: apart from my dig for you not giving real information.. On Mon, 2010-10-04 at 23:08 +0200, Dotan Cohen wrote: // On 1.1.1.1 [r...@1.1.1.1]# cat /etc/named.conf options { directory /etc; Why are you

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 08:48, Chiesa Stefano stefano.chi...@wki.it wrote: Hello Dothan. You said: The working site has both nameservers pointed to that same server (on two different IP addresses on eth0 and etho0:0). So the question is Are you sure you answer to queries on the proper

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 11:35, Eivind Olsen eiv...@aminor.no wrote: Hm, you mention in another posting that you're hosting other domains. Are they using the same registrar as the one that's giving you this error message? Yes. Are you _naming_ the nameservers the same? I know some registrars

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 16:31, Greg Whynott greg.whyn...@oicr.on.ca wrote: its as if they think hackers main source of targets comes from here.     doesn't appear to really want any help anyway. Not at all, rather I was trying to learn. I really didn't want anybody doing the heavy lifting for

Re: Unable to query the nameserver

2010-10-05 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 20:30, Eivind Olsen eiv...@aminor.no wrote: However, another site that _does_ work (with both nameservers on this host, not just ns1) shows the same thing: # nslookup ns1.sharingserver.eu 178.63.65.136 Server:         178.63.65.136 Address:        178.63.65.136#53 **

Re: Unable to query the nameserver

2010-10-05 Thread Ben McGinnes
On 6/10/10 6:49 AM, Dotan Cohen wrote: On Tue, Oct 5, 2010 at 20:30, Eivind Olsen eiv...@aminor.no wrote: I don't think you've mentioned which OS you're running, and whether you run a bundled or self-compiled version of BIND, so I'm not sure where it puts its logs by default. Do you see _any_

Re: Unable to query the nameserver

2010-10-04 Thread Andrey G. Sergeev (AKA Andris)
Hi Dotan! Mon, 4 Oct 2010 23:08:43 +0200 Dotan Cohen wrote: I am configuring BIND on two servers: ns1.example.de on a server with IP address 1.1.1.1 and ns2.example.de on a server with IP address 1.1.2.2. BIND starts fine on both servers, but when I try to configure my domain name in the

RE: Unable to query the nameserver

2010-10-04 Thread Greg Whynott
someone with way more bind clues than I would be able to give you a better answer.the error returned begs two questions.. 1. is this server behind or running a local firewall? 2. is bind actually listening on the proper interface? you could confirm #2 by typing 'nslookup ns1.example.de

Re: Unable to query the nameserver

2010-10-04 Thread Dotan Cohen
On Mon, Oct 4, 2010 at 23:20, Andrey G. Sergeev (AKA Andris) and...@aernet.ru wrote: Hi Dotan! Hello hello! You might be blocking 53/udp and (or) 53/tcp port. Try to query your problematic server from some other location rather than the site this server is installed on. The ports aren't

Re: Unable to query the nameserver

2010-10-04 Thread Lyle Giese
Dotan Cohen wrote: On Mon, Oct 4, 2010 at 23:20, Andrey G. Sergeev (AKA Andris) and...@aernet.ru wrote: Hi Dotan! Hello hello! You might be blocking 53/udp and (or) 53/tcp port. Try to query your problematic server from some other location rather than the site this server

Re: Unable to query the nameserver

2010-10-04 Thread Andrey G. Sergeev (AKA Andris)
Mon, 4 Oct 2010 23:41:13 +0200 Dotan Cohen wrote: You might be blocking 53/udp and (or) 53/tcp port. Try to query your problematic server from some other location rather than the site this server is installed on. The ports aren't blocked as another site (example.eu) hosted on the 1.1.1.1

Re: Unable to query the nameserver

2010-10-04 Thread Dotan Cohen
On Mon, Oct 4, 2010 at 23:37, Greg Whynott greg.whyn...@oicr.on.ca wrote: someone with way more bind clues than I would be able to give you a better answer.    the error returned begs two questions.. 1. is this server behind or running a local firewall? No. 2. is bind actually listening on

Re: Unable to query the nameserver

2010-10-04 Thread Nuno Paquete
Can you successfuly telnet port 53 from an external host? Have you seen your logs? There must be something logged. No dia 2010/10/04, às 23:56, Dotan Cohen dotanco...@gmail.com escreveu: On Mon, Oct 4, 2010 at 23:37, Greg Whynott greg.whyn...@oicr.on.ca wrote: someone with way more bind

Re: Unable to query the nameserver

2010-10-04 Thread Dotan Cohen
On Tue, Oct 5, 2010 at 00:29, Lyle Giese l...@lcrcomputer.net wrote: I would like to help but since you are refusing to post the real ip address or the real hostnames or the real domain names involved, I can not.  I could do some testing from here to see if your firewall was configured

Re: Unable to query the nameserver

2010-10-04 Thread Nuno Paquete
Are your servers running virtualized? No dia 2010/10/04, às 23:56, Dotan Cohen dotanco...@gmail.com escreveu: On Mon, Oct 4, 2010 at 23:37, Greg Whynott greg.whyn...@oicr.on.ca wrote: someone with way more bind clues than I would be able to give you a better answer.the error returned

RE: Unable to query the nameserver

2010-10-04 Thread Imri Zvik
You should first verify that you see the packets arriving to ns1.example.de - tcpdump should do the work. Then, enable the query log and ensure that BIND sees the query. Again, the logs are your friends. -Original Message- From: Dotan Cohen [mailto:dotanco...@gmail.com] Sent: Monday,

Re: Unable to query the nameserver

2010-10-04 Thread Noel Butler
On Mon, 2010-10-04 at 17:29 -0500, Lyle Giese wrote: Dotan Cohen wrote: The ports aren't blocked as another site (example.eu) hosted on the 1.1.1.1 server works fine. The working site has both nameservers pointed to that same server (on two different IP addresses on eth0 and

RE: Unable to query the nameserver

2010-10-04 Thread Imran
Sounds like a resolv.conf issue ... make sure that you have an entry in the resolv.conf file that maps ns1.example.de to 1.1.1.1 and ns2.example.de to 1.1.2.2 -Original Message- From: bind-users-bounces+imran=netwave...@lists.isc.org

Re: Unable to query the nameserver

2010-10-04 Thread Noel Butler
apart from my dig for you not giving real information.. On Mon, 2010-10-04 at 23:08 +0200, Dotan Cohen wrote: // On 1.1.1.1 [r...@1.1.1.1]# cat /etc/named.conf options { directory /etc; Why are you specifying /etc here? I suggest you use /var/named pid-file

Re: Unable to query the nameserver

2010-10-04 Thread Andrey G. Sergeev (AKA Andris)
Hi Imran, Mon, 4 Oct 2010 20:33:02 -0400 Imran wrote: Sounds like a resolv.conf issue ... make sure that you have an entry in the resolv.conf file that maps ns1.example.de to 1.1.1.1 and ns2.example.de to 1.1.2.2 You're wrong. The resolv.conf file has nothing to do with hostname-to-IP or