On Mon, Dec 07, 2009 at 01:56:06AM +0200, Andrei Popescu wrote: > On Sun,06.Dec.09, 15:39:59, Andrew Sackville-West wrote: > > > > there are clearly some differences. the lenny machine is making a > > AAAA? request (whatever that means) while the squeeze machine is > > making both a A? and AAAA? requests. And the responses are different. > > This behavior is consistent across attempts. > > This sounds like an ipv4/ipv6 issue. Maybe this NEWS.Debian entry for > libc6 has the solution: > > glibc (2.9-8) unstable; urgency=low > > Starting with version 2.9-8, unified IPv4/IPv6 lookup have been enabled > in the glibc's resolver. This is faster, fixes numerous of bugs, but is > problematic on some broken DNS servers and/or wrongly configured > firewalls. > > If such a DNS server is detected, the resolver switches (permanently > for that process) to a mode where the second request is sent only when > the first answer has been received. This means the first request will > be timeout, but subsequent requests should be fast again. This > behaviour can be enabled permanently by adding 'options single-request' > to /etc/resolv.conf.
Andrei, I owe you a beer! That's done it right there. Now it's just a matter of figuring out whether it's my firewall or my dns server that's broken... :) A
signature.asc
Description: Digital signature
