On 10.10.10 21:03, Doug Barton wrote:
> http://dougbarton.us/DNS/bind-users-FAQ.html#nslookup-evil
nice but I miss there some explanations that were mentioned here, e.g.
it sometimes does not query the server user asks for (iirc)
Something could be reworded. e.g. uses system libraries that could
http://dougbarton.us/DNS/bind-users-FAQ.html#nslookup-evil
--
Breadth of IT experience, and| Nothin' ever doesn't change,
depth of knowledge in the DNS. | but nothin' changes much.
Yours for the right price. :) | -- OK Go
http://SupersetSolutions.com/
__
t "ns"lookup was "name
> server" lookup). :-)
>
> -Original Message-
> From: bind-users-bounces+jlightner=water@lists.isc.org
> [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf
> Of Ben McGinnes
> Sent: Wednesday, October 06, 2
ightner=water@lists.isc.org] On Behalf
Of Ben McGinnes
Sent: Wednesday, October 06, 2010 1:52 PM
To: Kevin Darcy
Cc: bind-users@lists.isc.org
Subject: Re: Unable to query the nameserver
On 7/10/10 4:42 AM, Kevin Darcy wrote:
>
> ISC has tried to kill it, but the beast is resilient an
Hello Kevin,
Wed, 06 Oct 2010 13:42:35 -0400 Kevin Darcy wrote:
> ISC has tried to kill it, but the beast is resilient and won't die.
> Invocations of nslookup are embedded in thousands of legacy scripts
> and some folks are unable or unwilling to change them.
Well said, Kevin! Just have sent s
On 7/10/10 4:42 AM, Kevin Darcy wrote:
>
> ISC has tried to kill it, but the beast is resilient and won't die.
Maybe we should call it a wombat then ...
> Invocations of nslookup are embedded in thousands of legacy scripts and
> some folks are unable or unwilling to change them.
Nothing quit
Hello Kevin,
Wed, 06 Oct 2010 07:47:41 -0700 "Kevin Oberman" wrote:
> I keep hoping for a BIND distro that upgrades nslookup(1) to:
> print STDERR, "nslookup(1) has been replaced by host(1)\n"; exit 0;
Short answer: never.
> I've been wishing that nslookup would go away since back in BIND-v4
On 10/6/2010 11:44 AM, Ben McGinnes wrote:
On 7/10/10 2:09 AM, Kevin Oberman wrote:
I can find nothing in the documentation that states such. If I missed
it, I'd appreciate someone pointing me at it.
I have some vague memory of seeing messages to that effect when using it
on a Solaris
On 7/10/10 2:09 AM, Kevin Oberman wrote:
>
> I can find nothing in the documentation that states such. If I missed
> it, I'd appreciate someone pointing me at it.
I have some vague memory of seeing messages to that effect when using it
on a Solaris system in around 1999. I stopped using it aroun
> Date: Thu, 07 Oct 2010 01:53:29 +1100
> From: Ben McGinnes
>
> On 7/10/10 1:47 AM, Kevin Oberman wrote:
> >
> > I keep hoping for a BIND distro that upgrades nslookup(1) to:
> > print STDERR, "nslookup(1) has been replaced by host(1)\n"; exit 0;
>
> Wasn't nslookup already deprecated about
On 7/10/10 1:47 AM, Kevin Oberman wrote:
>
> I keep hoping for a BIND distro that upgrades nslookup(1) to:
> print STDERR, "nslookup(1) has been replaced by host(1)\n"; exit 0;
Wasn't nslookup already deprecated about ten years or so ago?
Regards,
Ben
signature.asc
Description: OpenPGP dig
> Date: Wed, 06 Oct 2010 10:35:32 -0400
> From: Kevin Darcy
> Sender: bind-users-bounces+oberman=es@lists.isc.org
>
> On 10/5/2010 3:49 PM, Dotan Cohen wrote:
> > On Tue, Oct 5, 2010 at 20:30, Eivind Olsen wrote:
> >
> >>> However, another site that _does_ work (with both nameservers on
On 10/5/2010 3:49 PM, Dotan Cohen wrote:
On Tue, Oct 5, 2010 at 20:30, Eivind Olsen wrote:
However, another site that _does_ work (with both nameservers on this
host, not just ns1) shows the same thing:
# nslookup ns1.sharingserver.eu 178.63.65.136
Server: 178.63.65.136
Address:
On 6/10/10 6:49 AM, Dotan Cohen wrote:
> On Tue, Oct 5, 2010 at 20:30, Eivind Olsen wrote:
>>
>> I don't think you've mentioned which OS you're running, and whether you run
>> a bundled or self-compiled version of BIND, so I'm not sure where it puts
>> its logs by default. Do you see _any_ mention
On Tue, Oct 5, 2010 at 20:30, Eivind Olsen wrote:
>> However, another site that _does_ work (with both nameservers on this
>> host, not just ns1) shows the same thing:
>>
>> # nslookup ns1.sharingserver.eu 178.63.65.136
>> Server: 178.63.65.136
>> Address: 178.63.65.136#53
>>
>> **
On Tue, Oct 5, 2010 at 16:31, Greg Whynott wrote:
> its as if they think hackers main source of targets comes from here.
> doesn't appear to really want any help anyway.
>
Not at all, rather I was trying to learn. I really didn't want anybody
doing the heavy lifting for me. But I've gotten to
On Tue, Oct 5, 2010 at 11:35, Eivind Olsen wrote:
> Hm, you mention in another posting that you're hosting other domains. Are
> they using the same registrar as the one that's giving you this error
> message?
Yes.
> Are you _naming_ the nameservers the same? I know some registrars
> require you
On Tue, Oct 5, 2010 at 08:48, Chiesa Stefano wrote:
> Hello Dothan.
> You said: "The working site has both nameservers pointed to that same
> server (on two different IP addresses on eth0 and etho0:0)."
> So the question is "Are you sure you answer to queries on the proper
> interface?"
> Maybe yo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 05.10.2010 20:35, Dotan Cohen wrote:
I think the problem is that your two servers return different
answers to the same question:
dig +norec sharingcenter.de ns @178.63.65.171:
> ;; ANSWER SECTION:
> sharingcenter.de. 86400 IN NS ns
On Tue, Oct 5, 2010 at 02:47, Noel Butler wrote:
> apart from my dig for you not giving real information..
>
> On Mon, 2010-10-04 at 23:08 +0200, Dotan Cohen wrote:
>
>
> // On 1.1.1.1
> [r...@1.1.1.1]# cat /etc/named.conf
> options {
> directory "/etc";
>
>
> Why are you specifying /e
Andrey G. Sergeev (AKA Andris) wrote:
> Hello Dotan,
>
>
> Tue, 5 Oct 2010 20:35:24 +0200 Dotan Cohen wrote:
>
>
>> The two domains names are sharingcenter.eu and sharingcenter.de. The
>> eu domain has ns1 and ns2 on the same server (IP addresses
>> 178.63.65.136 and 178.63.65.188) and works fin
Hello Dotan,
Tue, 5 Oct 2010 20:35:24 +0200 Dotan Cohen wrote:
> The two domains names are sharingcenter.eu and sharingcenter.de. The
> eu domain has ns1 and ns2 on the same server (IP addresses
> 178.63.65.136 and 178.63.65.188) and works fine. The de domain has
> ns1 on this same server (IP ad
On Tue, Oct 5, 2010 at 02:35, Noel Butler wrote:
> Quite right, too many people with paranoia come here looking for help but
> refuse to let us do correct remote testing.
> First post was 7.08am local, its 3 /12 hours later and we still have no real
> info, had it been supplied his problem may bee
Hello Dotan,
Tue, 5 Oct 2010 20:20:02 +0200 Dotan Cohen wrote:
>> Can you successfuly telnet port 53 from an external host?
>
> Yes, but it's only a connection. I don't see any output. That' me
> typing "helo":
>
> $ telnet 178.63.65.136 53
> Trying 178.63.65.136...
> Connected to 178.63.65.13
--On 5. oktober 2010 20.20.02 +0200 Dotan Cohen
wrote:
Yes, but it's only a connection. I don't see any output. That' me typing
"helo":
$ telnet 178.63.65.136 53
Trying 178.63.65.136...
Connected to 178.63.65.136.
Escape character is '^]'.
helo
USER test
^C^C
Connection closed by foreign host.
--On 5. oktober 2010 20.07.57 +0200 Dotan Cohen
wrote:
# nslookup ns1.sharingserver.de 178.63.65.171
Server: 178.63.65.171
Address:178.63.65.171#53
** server can't find ns1.sharingserver.de: NXDOMAIN
In this case, you're trying to look up ns1.sharingserver.de on the
nameserve
On Tue, Oct 5, 2010 at 01:03, Nuno Paquete wrote:
> Can you successfuly telnet port 53 from an external host?
Yes, but it's only a connection. I don't see any output. That' me typing "helo":
$ telnet 178.63.65.136 53
Trying 178.63.65.136...
Connected to 178.63.65.136.
Escape character is '^]'.
h
On Mon, Oct 4, 2010 at 23:37, Greg Whynott wrote:
> someone with way more bind clues than I would be able to give you a better
> answer. the error returned begs two questions..
>
> 1. is this server behind or running a local firewall?
> 2. is bind actually listening on the proper interface?
>
On Tue, Oct 5, 2010 at 01:14, Nuno Paquete wrote:
> Are your servers running virtualized?
>
No, it's real hardware!
--
Dotan Cohen
http://gibberish.co.il
http://what-is-what.com
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.o
its as if they think hackers main source of targets comes from here.doesn't
appear to really want any help anyway.
-g
On Oct 4, 2010, at 8:35 PM, Noel Butler wrote:
> On Mon, 2010-10-04 at 17:29 -0500, Lyle Giese wrote:
>> Dotan Cohen wrote:
>
>>> The ports aren't blocked as another s
Dotan - Are zone transfers working correctly between ns1 & ns2? Although
you have ns2 defined as a slave to ns1, your cat output of the zone on ns2
shows a zone with contents different from the master. The slave zone is
missing a host record for ns1. Is it possible the system trying to resolve
n
> but when I try to configure
> my domain name in the registrar's control panel I get this error:
> """
> Error : Unable to query the nameserver ns1.example.de
> """
Hm, you mention in another posting that you're hosting other domains. Are
they using the same registrar as the one that's giving you
Hi Imran,
Mon, 4 Oct 2010 20:33:02 -0400 "Imran" wrote:
> Sounds like a resolv.conf issue ... make sure that you have an
> entry in the resolv.conf file that maps ns1.example.de to 1.1.1.1
> and ns2.example.de to 1.1.2.2
You're wrong. The resolv.conf file has nothing to do with
hostname-to-IP o
apart from my dig for you not giving real information..
On Mon, 2010-10-04 at 23:08 +0200, Dotan Cohen wrote:
>
> // On 1.1.1.1
> [r...@1.1.1.1]# cat /etc/named.conf
> options {
> directory "/etc";
>
Why are you specifying /etc here?
I suggest you use /var/named
>pid-
Sounds like a resolv.conf issue ... make sure that you have an entry in the
resolv.conf file that maps ns1.example.de to 1.1.1.1 and ns2.example.de to
1.1.2.2
-Original Message-
From: bind-users-bounces+imran=netwave...@lists.isc.org
[mailto:bind-users-bounces+imran=netwave...@lists.isc.
On Mon, 2010-10-04 at 17:29 -0500, Lyle Giese wrote:
> Dotan Cohen wrote:
> > The ports aren't blocked as another site (example.eu) hosted on the
> > 1.1.1.1 server works fine. The working site has both nameservers
> > pointed to that same server (on two different IP addresses on eth0 and
> >
You should first verify that you see the packets arriving to ns1.example.de
- tcpdump should do the work.
Then, enable the query log and ensure that BIND sees the query.
Again, the logs are your friends.
-Original Message-
From: Dotan Cohen [mailto:dotanco...@gmail.com]
Sent: Monday, Oct
Are your servers running virtualized?
No dia 2010/10/04, às 23:56, "Dotan Cohen"
escreveu:
On Mon, Oct 4, 2010 at 23:37, Greg Whynott
wrote:
someone with way more bind clues than I would be able to give you a
better answer.the error returned begs two questions..
1. is this server
On Tue, Oct 5, 2010 at 00:29, Lyle Giese wrote:
> I would like to help but since you are refusing to post the real ip address
> or the real hostnames or the real domain names involved, I can not. I could
> do some testing from here to see if your firewall was configured correctly
> or what the vi
Can you successfuly telnet port 53 from an external host?
Have you seen your logs? There must be something logged.
No dia 2010/10/04, às 23:56, "Dotan Cohen"
escreveu:
On Mon, Oct 4, 2010 at 23:37, Greg Whynott
wrote:
someone with way more bind clues than I would be able to give you a
b
On Mon, Oct 4, 2010 at 23:37, Greg Whynott wrote:
> someone with way more bind clues than I would be able to give you a better
> answer. the error returned begs two questions..
>
> 1. is this server behind or running a local firewall?
No.
> 2. is bind actually listening on the proper interfa
Mon, 4 Oct 2010 23:41:13 +0200 Dotan Cohen wrote:
>> You might be blocking 53/udp and (or) 53/tcp port. Try to query
>> your problematic server from some other location rather than the
>> site this server is installed on.
>>
>
> The ports aren't blocked as another site (example.eu) hosted on
> th
Dotan Cohen wrote:
> On Mon, Oct 4, 2010 at 23:20, Andrey G. Sergeev (AKA Andris)
> wrote:
>
>> Hi Dotan!
>>
>>
>
> Hello hello!
>
>
>> You might be blocking 53/udp and (or) 53/tcp port. Try to query your
>> problematic server from some other location rather than the site this
>> server
On Mon, Oct 4, 2010 at 23:20, Andrey G. Sergeev (AKA Andris)
wrote:
> Hi Dotan!
>
Hello hello!
> You might be blocking 53/udp and (or) 53/tcp port. Try to query your
> problematic server from some other location rather than the site this
> server is installed on.
>
The ports aren't blocked as a
someone with way more bind clues than I would be able to give you a better
answer.the error returned begs two questions..
1. is this server behind or running a local firewall?
2. is bind actually listening on the proper interface?
you could confirm #2 by typing 'nslookup ns1.example.de 1.1.1
Hi Dotan!
Mon, 4 Oct 2010 23:08:43 +0200 Dotan Cohen wrote:
> I am configuring BIND on two servers: ns1.example.de on a server with
> IP address 1.1.1.1 and ns2.example.de on a server with IP address
> 1.1.2.2. BIND starts fine on both servers, but when I try to
> configure
> my domain name in t
46 matches
Mail list logo
