I should have mentioned that I tried chaning /etc/named.conf listen-on port 53 { <a href="http://127.0.0.1">127.0.0.1</a>; }; to listen-on port 53 { <a href="http://192.168.1.50">192.168.1.50</a>; }; <br><br>
<div class="gmail_quote">On Wed, Jul 2, 2008 at 9:51 PM, Stuart, Joseph <<a href="mailto:Joseph.Stuart@capella.edu">Joseph.Stuart@capella.edu</a>> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div>
<p><font size="2">This is from my blackberry so I might not have seen it all, but maybe the listen-on port 53 (127.00.1) is the problem. Shouldn't that ip be the external interface?<br><br><br>-----<br>Sent from my wireless device
<div>
<div></div>
<div class="Wj3C7c"><br><br>-----Original Message-----<br>From: <a href="mailto:tclug-list-bounces@mn-linux.org" target="_blank">tclug-list-bounces@mn-linux.org</a> <<a href="mailto:tclug-list-bounces@mn-linux.org" target="_blank">tclug-list-bounces@mn-linux.org</a>><br>
To: <a href="mailto:tclug-list@mn-linux.org" target="_blank">tclug-list@mn-linux.org</a> <<a href="mailto:tclug-list@mn-linux.org" target="_blank">tclug-list@mn-linux.org</a>><br>Sent: Wed Jul 02 21:40:11 2008<br>Subject: [tclug-list] DNS connection refused<br>
<br>Howdy,<br><br>I have Fedora 9 installed and would like to use it as the DNS system in the house.<br><br>The setup is as follows<br><br>options {<br> listen-on port 53 { <a href="http://127.0.0.1/" target="_blank">127.0.0.1</a>; };<br>
listen-on-v6 port 53 { ::1; };<br> directory "/var/named";<br> dump-file "/var/named/data/cache_dump.db";<br> statistics-file "/var/named/data/named_stats.txt";<br>
memstatistics-file "/var/named/data/named_mem_stats.txt";<br> allow-query { localhost; };<br> recursion yes;<br> forwarders {<br> <a href="http://68.87.77.130/" target="_blank">68.87.77.130</a>;<br>
<a href="http://68.87.72.130/" target="_blank">68.87.72.130</a>;<br> };<br>};<br>logging {<br> channel default_debug {<br> file "data/named.run";<br> severity dynamic;<br>
};<br>};<br>zone "." IN {<br> type hint;<br> file "<a href="http://named.ca/" target="_blank">named.ca</a>";<br>};<br><br><br>include "/etc/named.rfc1912.zones";<br><br>
zone "home.local" {<br> type master;<br> file "/var/named/home.local.hosts";<br> };<br><br>zone "1.168.192.in-addr.arpa" {<br> type master;<br> file "1.168.192.in-addr.arpa.zone";<br>
allow-update { key "rndckey"; };<br> notify yes;<br><br><br>I have the files in /var/named setup and configured. From the DNS system I can type<br>nslookup 43p and get the following<br>[root@fc9 named]# vi /etc/named.conf<br>
[root@fc9 named]# nslookup 43p<br>Server: <a href="http://127.0.0.1/" target="_blank">127.0.0.1</a><br>Address: <a href="http://127.0.0.1/#53" target="_blank">127.0.0.1#53</a><br>Name: 43p.home.local<br>Address: <a href="http://192.168.1.52/" target="_blank">192.168.1.52</a><br>
<br>From a windows system I get the following<br>C:\Users\dalan>nslookup 43p<br>Server: UnKnown<br>Address: <a href="http://192.168.1.50:53/" target="_blank">192.168.1.50:53</a><br>*** UnKnown can't find 43p: Query refused<br>
<br>From the AIX system I get<br>(43p-aix) [dalan] nslookup 43p<br>*** Can't find server name for address 192.168.1.50:Query refused<br>*** Default servers are not available<br>(43p-aix) [dalan]<br><br>I have shut off the firewall and SE-Linux on the Fedora system. I'm not sure why the fedora system is blocking/refusing the request coming from another system.<br>
I even put the following entries in iptables.<br>SERVER_IP="<a href="http://192.168.1.50/" target="_blank">192.168.1.50</a>"<br>iptables -A INPUT -p udp -s 0/0 --sport 1024:65535 -d $SERVER_IP --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT<br>
iptables -A OUTPUT -p udp -s $SERVER_IP --sport 53 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT<br>iptables -A INPUT -p udp -s 0/0 --sport 53 -d $SERVER_IP --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT<br>
iptables -A OUTPUT -p udp -s $SERVER_IP --sport 53 -d 0/0 --dport 53 -m state --state ESTABLISHED -j ACCEPT<br>iptables -A INPUT -p tcp -s 0/0 --sport 1024:65535 -d $SERVER_IP --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT<br>
iptables -A OUTPUT -p tcp -s $SERVER_IP --sport 53 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT<br>iptables -A INPUT -p tcp -s 0/0 --sport 53 -d $SERVER_IP --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT<br>
iptables -A OUTPUT -p tcp -s $SERVER_IP --sport 53 -d 0/0 --dport 53 -m state --state ESTABLISHED -j ACCEPT<br><br>I still have the same effect.<br><br>Running the following shows that the system is refusing the connection.<br>
/usr/sbin/tcpdump -X port 53<br><br>[root@fc9 named]# /usr/sbin/tcpdump -X port 53<br>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br>listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes<br>
21:39:38.512926 IP aix.sparish.local.52686 > fc9.sparish.local.domain: 46304+ PTR? 50.1.168.192.in-addr.arpa. (43)<br> 0x0000: 4500 0047 ac22 0000 1e11 6ccd c0a8 0134 E..G."....l....4<br> 0x0010: c0a8 0132 cdce 0035 0033 7c2c b4e0 0100 ...2...5.3|,....<br>
0x0020: 0001 0000 0000 0000 0235 3001 3103 3136 .........50.1.16<br> 0x0030: 3803 3139 3207 696e 2d61 6464 7204 6172 <a href="http://8.192.in-addr.ar/" target="_blank">8.192.in-addr.ar</a><br> 0x0040: 7061 0000 0c00 01 pa.....<br>
21:39:38.519048 IP fc9.sparish.local.domain > aix.sparish.local.52686: 46304 Refused- 0/0/0 (43)<br> 0x0000: 4500 0047 0000 4000 4011 b6ef c0a8 0132 E..G..@.@......2<br> 0x0010: c0a8 0134 0035 cdce 0033 fc26 b4e0 8105 ...4.5...3.&....<br>
0x0020: 0001 0000 0000 0000 0235 3001 3103 3136 .........50.1.16<br> 0x0030: 3803 3139 3207 696e 2d61 6464 7204 6172 <a href="http://8.192.in-addr.ar/" target="_blank">8.192.in-addr.ar</a><br> 0x0040: 7061 0000 0c00 01 pa.....<br>
<br><br>Any help would be welcome<br><br>Thanks<br></div></div></font>
<p></p></p></div></blockquote></div><br>