I'm attempting to set up a DNS server that points to two other internal DNS servers.
Internal DNS servers: 192.168.0.4 // 192.168.0.5 My box: 192.168.97.6 .. name is kerrigan.zipp
I've got bind configured and clients can hit internal addresses but can't seem to grab anything external.
[root@zeratul ~]# ping kerrigan.zipp -- Ping succeeds -- [root@zeratul ~]# ping google.com ping: unknown host google.com
In doing a tcpdump on Kerrigan.zipp, I can see that the request for google.com is being made to dns1 (192.168.0.4) and a reply is coming back.
15:30:37.775949 IP kerrigan.zipp.50825 > dns1.internal.box.domain: 13756+ A? google.com. (28) 15:30:37.776383 IP dns1.internal.box.domain > kerrigan.zipp.50825: 13756 4/13/8 A 220.127.116.11, A 18.104.22.168, A 22.214.171.124, A 126.96.36.199 (491)
It appears as though kerrigan.zipp is getting the replies and then not doing anything with them. If I take the ip address returned from dns1, I can ping it without a problem.
[root@zeratul ~]# ping 188.8.131.52 -- Ping succeeds --
Any ideas? Oh, and I turned off the firewall just to be sure. Port 53 tcp / udp were open.
Result of the dig commands.. These show that I can get it from my forward DNS but not my new, local DNS:
[root@kerrigan named]# dig @192.168.0.4 google.com ; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> @192.168.0.4 google.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33681 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 13, ADDITIONAL: 8 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 256 IN A 184.108.40.206 google.com. 256 IN A 220.127.116.11 google.com. 256 IN A 18.104.22.168 google.com. 256 IN A 22.214.171.124 ;; Query time: 1 msec ;; SERVER: 192.168.0.4#53(192.168.0.4) ;; WHEN: Wed Mar 2 16:33:26 2011 ;; MSG SIZE rcvd: 491 [root@kerrigan named]# dig @127.0.0.1 google.com ; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> @127.0.0.1 google.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61769 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;google.com. IN A ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed Mar 2 16:33:36 2011 ;; MSG SIZE rcvd: 28