Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

From tcpdump:

Sep 12 23:03:43 server named[25095]: error (unexpected RCODE SERVFAIL) resolving 'exitlist.torproject.org.www.mydomain.com/A/IN': ip#53

OS: CentOS 6 resolv.conf

search www.domain.com domain.com
nameserver 127.0.0.1
nameserver 8.8.8.8
nameserver 8.8.8.8

Using Bind with recursion in options off No firewall on Hosts file is normal

ifcfg-em1:
DEVICE="em1"
BOOTPROTO="static"
DNS1="8.8.8.8"
DNS2="8.8.4.4"
DNS3="127.0.0.1"
GATEWAY="edited"
HWADDR="edited"
IPADDR="server_ip"
IPV6INIT="yes"
NETMASK="255.255.255.0"
NM_CONTROLLED="yes"
ONBOOT="yes"
TYPE="Ethernet"


`'
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.2 <<>> google.com. @localhost
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57512
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;google.com.                    IN      A

;; ANSWER SECTION:
google.com.             300     IN      A       173.194.78.101
google.com.             300     IN      A       173.194.78.138
google.com.             300     IN      A       173.194.78.139
google.com.             300     IN      A       173.194.78.100
google.com.             300     IN      A       173.194.78.113
google.com.             300     IN      A       173.194.78.102

;; AUTHORITY SECTION:
google.com.             172131  IN      NS      ns2.google.com.
google.com.             172131  IN      NS      ns1.google.com.
google.com.             172131  IN      NS      ns4.google.com.
google.com.             172131  IN      NS      ns3.google.com.

;; ADDITIONAL SECTION:
ns2.google.com.         172131  IN      A       216.239.34.10
ns1.google.com.         172131  IN      A       216.239.32.10
ns3.google.com.         172131  IN      A       216.239.36.10
ns4.google.com.         172131  IN      A       216.239.38.10

;; Query time: 18 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Sep 13 00:23:16 2012
;; MSG SIZE  rcvd: 260

p.s. can't even access site with domain anymore.

share|improve this question
    
What is the question here ? –  topdog Sep 13 '12 at 4:17
    
The question is why is it doing this? I know this isn't normal behavior. I can resolve domain names to IP addresses but I cannot ping domains or IP addreses. I also get constant servfails in tcpdump although people are able to connect to my site and interact with it as usual. –  Tar Sep 13 '12 at 4:24
    
Well the question does not provide any indication of your environment, can you edit it to provide more detail –  topdog Sep 13 '12 at 4:29
    
I've edited with some more information.. though I don't know how to format it. –  Tar Sep 13 '12 at 4:32
    
Drop the two google nameservers from resolv.conf and add them as forwarders in /etc/named.conf instead. –  topdog Sep 13 '12 at 4:37

2 Answers 2

If you are asking why it is trying to resolv exitlist.torproject.org.www.mydomain.com instead of exitlist.torproject.org, then the answer is probably IS trying to resolve exitlist.torproject.org failing and then using the search path you have defined in your resolv.conf in the line search www.domain.com domain.com.

share|improve this answer

It really is hard to know what you're asking but I'll give it a shot. You have 127.0.0.1 set as your first nameserver, so that's what is checked first.

With recursion turned off a DNS request that cannot be authouritatively answered by the localhost will get a SERVFAIL, which is still an answer. That is the end of the story. The other nameservers should not be consulted because you already have an answer. They will only be consulted if 127.0.0.1 fails to respond to the query.

With recursion turned on for the same query the local instance of BIND will recurse and try to get you a valid answer. If the local instance responds in any way the other nameservers will not be consulted.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.