Hi Steve,

 

Thanks for you note.

It's worked now after flushing my iptables

 

Regards

 

Saif

 

From: Stephen Wilcox [mailto:[email protected]] 
Sent: Sunday, May 20, 2012 7:49 PM
To: Saif Ahmed
Cc: [email protected]
Subject: Re: [menog] FW: DNS behind firewall

 

Hi Saif,

 what does the named log file say, and what response do you get back? It
should work based on your config.

 

Can you check your master zones are correctly configured and NS lines exist
for your server, also is the glue correct? 

 

My guess is your name server doesn't think its authorative for the cmc.iq
zone...

 

Steve

 

On 20 May 2012 14:10, Saif Ahmed <[email protected]> wrote:

Hi,
I have configured authuritive only DNS,
It's respond well internally
But not answer the public quires,

options {
 directory "/etc/named";
 // version statement - inhibited for security
 // (avoids hacking any known weaknesses)
 version "not currently available";
 // allows notifies only from master
 allow-notify {192.X.X.X; };
 // disables all zone transfer requests
 allow-transfer{"none"; };
 allow-query { any; };
 query-source address * port 53;
 recursion no;
 pid-file "/var/run/named/named.pid";

below the tcpdump "udp port 53" result

17:05:03.913856 IP (tos 0x0, ttl 106, id 6612, offset 0, flags [none], proto
UDP (17), length 52)
   peach.dnsstuff.com.pmsm-webrctl > 192.168.30.100.domain: [udp sum ok] 1+
A? com.iq. (24)
17:05:03.914396 IP (tos 0x0, ttl 64, id 28758, offset 0, flags [DF], proto
UDP (17), length 73)

Waiting for your advise;

Thanks A lot

Saif


_______________________________________________
Menog mailing list
[email protected]
http://lists.menog.net/mailman/listinfo/menog





 

-- 
Director / Founder
IX Reach Ltd
E: [email protected]
M: +44 7966 048633

Tempus Court, Bellfield Road, High Wycombe, HP13 5HA, UK.

 

_______________________________________________
Menog mailing list
[email protected]
http://lists.menog.net/mailman/listinfo/menog

Reply via email to