Re: DNS problems

[steve]

David Upex wrote:
I found a typo in my revp.192.168.11 file.
Still not working, I get a timeout from nslookup on the windows box
stating: ..Can't find server name for address 192.168.11.1...
Below is my revp192.168.11 file:
;
; reverse pointers for 192.168.11.0 subnet
;
$ORIGIN .
 

Are you sure this is correct? I thought it needed to be absolute, ie in 
this case basil.rebelchicken.net.
( with the . at the end making it absolute... is the the correct term? 
). Would this make it .., not .?

$TTL 1D	;
11.168.192.in-addr.arpa IN SOA  basil.rebelchicken.net.
hostmaster.rebelchicken.net. (
             200407161  ; serial
 

Standard practice is to use today's date, plus a 2 digit serial -> 
2004082301

             28800      ; refresh (8 hours)
             14400      ; retry (4hours)
             2419200    ; expire (4 weeks)
             86400      ; minimum (1 day)
             )
; define the authoratative name server
             NS      basil.rebelchicken.net.
 

You need an IN befor NS to indicate internet, and following?
$ORIGIN 11.168.192.in-arpa.
$TTL 1D
; our hosts, in numeric order
1             PTR     basil.rebelchicken.net.
2             PTR     sage.rebelchicken.net.
<>
Try...
@ IN SOA basil.rebelchicken.net. hostmaster.rebelchicken.net. (
             2004082301 ; serial
             28800      ; refresh (8 hours)
             14400      ; retry (4hours)
             2419200    ; expire (4 weeks)
             86400      ; minimum (1 day)
             )
; define the authoratative name server
             IN NS      basil.rebelchicken.net.
; our hosts, in numeric order
1             IN PTR     basil.rebelchicken.net.
2             IN PTR     sage.rebelchicken.net.
Good Luck!
Steve
Maybe I need to go back and do a bit more reading...
On Mon, 2004-08-23 at 22:29, Matthew Gregan wrote:
 

At 2004-08-23T22:13:15+1200, David Upex wrote:
   

I think my network configuration is OK, and the fact that I can
connect to the internet from the 10 subnet if I use the IP address eg.
http://66.102.7.147 and  I get the google page displayed, this means
that IP Masquerading is working OK.
     

So the problem is that my DNS is not resolving domain names on the 10
subnet (it works OK when I'm surfing on the DNS box itself).
     

What's in your /etc/resolv.conf file in the DNS/firewall box?
Is the address on the Windows box specified for the DNS server correct?
Your bind daemon is spitting out errors for one of your zones.  Fix it
up as Steve has suggested.  revp.192.168.11 is the likely culprit.
If you open a command prompt on the Windows box and enter:
C:\ nslookup
What does it come back with?  It should display the name and IP address
of your DNS server, assuming the Windows machine is configured correctly
and the DNS server is responding.  If you're seeing timeouts from
nslookup, the Windows machine can't even talk to the DNS server on your
Linux box.
Cheers,
-mjg