Basically,
I'm attempting to set up a DNS server that points to two other internal DNS servers.
Internal DNS servers: 192.168.0.4 // 192.168.0.5 My box: 192.168.97.6 .. name is kerrigan.zipp
I've got bind configured and clients can hit internal addresses but can't seem to grab anything external.
[root@zeratul ~]# ping kerrigan.zipp
-- Ping succeeds --
[root@zeratul ~]# ping google.com
ping: unknown host google.com
In doing a tcpdump on Kerrigan.zipp, I can see that the request for google.com is being made to dns1 (192.168.0.4) and a reply is coming back.
15:30:37.775949 IP kerrigan.zipp.50825 > dns1.internal.box.domain: 13756+ A? google.com. (28)
15:30:37.776383 IP dns1.internal.box.domain > kerrigan.zipp.50825: 13756 4/13/8 A 72.14.204.99, A 72.14.204.103, A 72.14.204.104, A 72.14.204.147 (491)
It appears as though kerrigan.zipp is getting the replies and then not doing anything with them. If I take the ip address returned from dns1, I can ping it without a problem.
[root@zeratul ~]# ping 72.14.204.99
-- Ping succeeds --
Any ideas? Oh, and I turned off the firewall just to be sure. Port 53 tcp / udp were open.
Result of the dig commands.. These show that I can get it from my forward DNS but not my new, local DNS:
[root@kerrigan named]# dig @192.168.0.4 google.com
; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> @192.168.0.4 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33681
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 13, ADDITIONAL: 8
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 256 IN A 72.14.204.104
google.com. 256 IN A 72.14.204.147
google.com. 256 IN A 72.14.204.99
google.com. 256 IN A 72.14.204.103
;; Query time: 1 msec
;; SERVER: 192.168.0.4#53(192.168.0.4)
;; WHEN: Wed Mar 2 16:33:26 2011
;; MSG SIZE rcvd: 491
[root@kerrigan named]# dig @127.0.0.1 google.com
; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> @127.0.0.1 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61769
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;google.com. IN A
;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Mar 2 16:33:36 2011
;; MSG SIZE rcvd: 28
bind.conf
snippet, showing the world how you've told your local machine's DNS server to forward query resolution off to other DNS servers in the first place, is missing.