On Tue, Aug 21, 2012 at 09:45:50AM -0500,
   Alfonso Alejandro Reyes Jiménez wrote:
> Thanks for the tip but I have bind running and it seems not to be
> allowed to make queries to spamhaus:
> 
> [root@mail ~]# dig 2.0.0.127.zen.spamhaus.org any
> 
> ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.2 <<>>
> 2.0.0.127.zen.spamhaus.org any
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35309
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;2.0.0.127.zen.spamhaus.org.    IN    ANY
> 
> ;; AUTHORITY SECTION:
> zen.spamhaus.org.    6    IN    SOA    need.to.know.only.
> hostmaster.spamhaus.org. 1208211440 3600 600 432000 150
> 
> ;; Query time: 71 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Tue Aug 21 09:44:12 2012
> ;; MSG SIZE  rcvd: 108
> 
> [root@mail ~]#
> 
> Here's the DNS config part:
> 
> [root@mail ~]# vi /etc/resolv.conf
> 
> # Generated by NetworkManager
> nameserver 127.0.0.1
> 
> The BIND forwarding is made to a public dns do you think that could
> be the problem?

rob0 quoted from upthread:
> >If you're using a nameserver external to you, such as Google 
> >Public DNS or any ISP's resolver, there is a very good chance that 
> >Spamhaus is blocking your queries.
> >
> >If my guess is right, you can possibly fix it by installing and 
> >using your own local caching resolver, i.e., BIND named(8) or 
> >other implementation of DNS recursion. Offer void where taxed or 

That was my guess. Now it seems to be confirmed. Remove the 
forwarders from named.conf(5), ensure that recursion is allowed at 
least for "localhost"[1], "rndc reload", test again. If the test 
fails again, you might have to flush the cache. Another rndc(8) 
subcommand can do that also.

We're off topic here. If you need further help with BIND, follow up 
on the bind-users mailing list at ISC.org. Or, see my URL below; I 
can fix this for a minimal fee.
-- 
  http://rob0.nodns4.us/ -- system administration and consulting
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

Reply via email to