1) Confirm whether you need to forward at all. If you don't need to, then remove the forwarders entries and that should take care of the errors in your log. 2) If you *must* use forwarders, look at the part of the config that you didn't show us, and determine whether there is something there (e.g. query-source address and/or port, "server" stanza with an inappropriate TSIG key or EDNS buffer size, etc.) that is causing your packets destined for 216.171.238.66 to be dropped or rejected, by the target server or some intermediate device in between.

- Kevin

Shi Jin wrote:
Try
dig @216.171.238.66 hp.com
to see if the .66 host answers to your queries. Maybe you
got a wrong IP there? Try the same for .67, the other DNS.


Thank you very much.  I tried what you suggested and it seems that these two 
servers work perfectly. In fact, I can simply set my DNS to these two servers 
and have the internet names resolved without any problem. The only reason I run 
my own DNS server is to resolve the intranet names.


~$ dig @216.171.238.66 hp.com

; <<>> DiG 9.5.1-P2 <<>> @216.171.238.66 hp.com
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47923
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 6, ADDITIONAL: 6

;; QUESTION SECTION:
;hp.com.                                IN      A

;; ANSWER SECTION:
hp.com.                 574     IN      A       15.216.110.140
hp.com.                 574     IN      A       15.192.45.21
hp.com.                 574     IN      A       15.192.45.22
hp.com.                 574     IN      A       15.192.45.138
hp.com.                 574     IN      A       15.192.45.139
hp.com.                 574     IN      A       15.216.110.21
hp.com.                 574     IN      A       15.200.2.21
hp.com.                 574     IN      A       15.200.30.21
hp.com.                 574     IN      A       15.200.30.22
hp.com.                 574     IN      A       15.200.30.23
hp.com.                 574     IN      A       15.200.30.24
hp.com.                 574     IN      A       15.216.110.22
hp.com.                 574     IN      A       15.216.110.139

;; AUTHORITY SECTION:
hp.com.                 86374   IN      NS      ns6.hp.com.
hp.com.                 86374   IN      NS      ns3.hp.com.
hp.com.                 86374   IN      NS      ns4.hp.com.
hp.com.                 86374   IN      NS      ns1.hp.com.
hp.com.                 86374   IN      NS      ns5.hp.com.
hp.com.                 86374   IN      NS      ns2.hp.com.

;; ADDITIONAL SECTION:
ns6.hp.com.             43600   IN      A       15.195.208.12
ns1.hp.com.             43600   IN      A       15.219.145.12
ns2.hp.com.             43600   IN      A       15.219.160.12
ns3.hp.com.             43600   IN      A       15.203.209.12
ns4.hp.com.             43600   IN      A       15.203.224.14
ns5.hp.com.             43600   IN      A       15.195.192.37

;; Query time: 2 msec
;; SERVER: 216.171.238.66#53(216.171.238.66)
;; WHEN: Mon Sep 21 14:59:25 2009
;; MSG SIZE  rcvd: 436


Can you see any problem there?
Thanks a lot.

Shi
--





_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users



_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to