[Gllug] DNS problem
Paul Nasrat
pnasrat at uk.now.com
Thu Aug 2 11:16:36 UTC 2001
On Thu, Aug 02, 2001 at 12:43:34PM +0200, Xander D Harkness wrote:
> I have a problem with my DNS.
>
> I am able to query my dns normally using Linux from a variety of locations.
>
> If, however I do an nslookup from some windows boxes I get a timeout.
[whois.nic.uk]
Domain Name: HARKNESS.CO.UK
Registered For: Mr Alexander Harkness
Domain Registered By: TELEWEST
Registered on 16-Feb-1998.
Record last updated on 26-Jul-2001 by <hostmaster at cableinet.net>.
Domain servers listed in order:
DAVROS.WILDTHORN.COM 213.48.46.196
SPITFIRE.WILDTHORN.COM 213.48.46.206
WHOIS database last updated at 02:35:01
02-Aug-2001
The NIC.UK Registration Host contains ONLY
information for domains
within co.uk, org.uk, net.uk, ltd.uk and
plc.uk. Please use the whois
server at rs.internic.net for Internet
Information or the whois server
at nic.ddn.mil for MILNET Information.
Dig gives:
; <<>> DiG 8.3 <<>> @davros.wildthorn.com harkness.co.uk soa
; (1 server found)
;; res options: init recurs defnam dnsrch
;; res_nsend to server davros.wildthorn.com 213.48.46.196: Connection timed out
Looks like this is your guilty party.
Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Interesting ports on davros.wildthorn.com (213.48.46.196):
Port State Service
53/tcp open domain
Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
hmm open, lets see what it does when we do an nslookup
[root at now0628 paul]# /usr/sbin/tethereal host davros.wildthorn.com
Kernel filter, protocol ALL, raw packet socket
Capturing on eth0
0.000000 now0628.uk.now.com -> davros.wildthorn.com DNS Standard query
PTR 196.46.48.213.in-addr.arpa
4.992352 now0628.uk.now.com -> davros.wildthorn.com DNS Standard
query PTR 196.46.48.213.in-addr.arpa
[paul at now0628 paul]$ nslookup - spitfire.wildthorn.com
Default Server: spitfire.wildthorn.com
Address: 213.48.46.206
> set type=ptr
> 196.46.48.213.in-addr.arpa
Server: spitfire.wildthorn.com
Address: 213.48.46.206
196.46.48.213.in-addr.arpa name = davros.wildthorn.com
196.46.48.213.in-addr.arpa nameserver = davros.wildthorn.com
196.46.48.213.in-addr.arpa nameserver = spitfire.wildthorn.com
davros.wildthorn.com internet address = 213.48.46.196
spitfire.wildthorn.com internet address = 213.48.46.206
Seems good in ptr record. Check what dns settings are on davros in
/etc/resolv.conf (ie can it get it's own ptr record).
Paul
--
"we apologise for any inconvenience" - God's Last Message to His Creation
Courtesy of Douglas Adams
--
Gllug mailing list - Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug
More information about the GLLUG
mailing list