caching nameserver not always working? status: SERVFAIL

[Marius Andreiana]

Hi

With caching-nameserver from rawhide, not all hosts are resolved. I'm
not sure if it's my fault or named's. 
/etc/resolv.conf has only the local machine IP:
nameserver 81.196.83.211
#nameserver 193.231.236.17
#nameserver 193.231.236.10

iptables allows all traffic on port 53, but not others above 1000, as
bind says it might use.

Although old rpms were removed (/etc/named.conf gone) and rawhide's
installed, rpm -V shows modified files:

[root at marte var]# rpm -V bind-chroot caching-nameserver bind-libs
.M......    /var/named/chroot/dev
....L...  c /etc/named.conf
....LUG.  c /var/named/localdomain.zone
....LUG.  c /var/named/localhost.zone
....LUG.  c /var/named/named.broadcast
....LUG.  c /var/named/named.ca
....LUG.  c /var/named/named.ip6.local
....LUG.  c /var/named/named.local
....LUG.  c /var/named/named.zero

named.conf has
// query-source address * port 53;
should this be uncommented?

Directory /var/named/data/ is empty.

Problem:
www.galuna.ro works, but marius.galuna.ro doesn't. Sometimes www doesn't
work, but galuna.ro works. dig returns status: SERVFAIL
Querying on ISP's nameserver works always. He's not hosting this site.


[root at marte var]# dig www.galuna.ro

; <<>> DiG 9.2.4 <<>> www.galuna.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44828
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.galuna.ro.                 IN      A

;; ANSWER SECTION:
www.galuna.ro.          344723  IN      CNAME   galuna.ro.
galuna.ro.              344723  IN      A       213.157.162.252

;; AUTHORITY SECTION:
galuna.ro.              10630   IN      NS      ns1.galuna.ro.

;; Query time: 25 msec
;; SERVER: 81.196.83.211#53(81.196.83.211)
;; WHEN: Fri Oct  8 12:28:39 2004
;; MSG SIZE  rcvd: 79

[root at marte var]# dig marius.galuna.ro

; <<>> DiG 9.2.4 <<>> marius.galuna.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 51278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;marius.galuna.ro.              IN      A

;; Query time: 23 msec
;; SERVER: 81.196.83.211#53(81.196.83.211)
;; WHEN: Fri Oct  8 12:28:43 2004
;; MSG SIZE  rcvd: 34

[root at marte var]# dig @193.231.236.17  marius.galuna.ro

; <<>> DiG 9.2.4 <<>> @193.231.236.17 marius.galuna.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49067
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 9, ADDITIONAL: 9

;; QUESTION SECTION:
;marius.galuna.ro.              IN      A

;; ANSWER SECTION:
marius.galuna.ro.       172800  IN      CNAME   galuna.ro.
galuna.ro.              172800  IN      A       213.157.162.252

;; AUTHORITY SECTION:
ro.                     171353  IN      NS      NS1.UNIVIE.AC.AT.
ro.                     171353  IN      NS      SUNIC.SUNET.SE.
ro.                     171353  IN      NS      DNS-RO.DENIC.DE.
ro.                     171353  IN      NS      NS-EXT.VIX.COM.
ro.                     171353  IN      NS      PRIMARY.ROTLD.ro.
ro.                     171353  IN      NS      SECONDARY.ROTLD.ro.
ro.                     171353  IN      NS      NS.UU.NET.
ro.                     171353  IN      NS      NS.RIPE.NET.
ro.                     171353  IN      NS      NS.AUSTRIA.EU.NET.

;; ADDITIONAL SECTION:
NS.UU.NET.              170151  IN      A       137.39.1.3
NS.RIPE.NET.            169233  IN      A       193.0.0.193
NS.RIPE.NET.            104651  IN      AAAA    2001:610:240:0:53::193
NS.AUSTRIA.EU.NET.      170498  IN      A       192.92.138.35
SUNIC.SUNET.SE.         170168  IN      A       192.36.125.2
DNS-RO.DENIC.DE.        172719  IN      A       81.91.161.76
NS-EXT.VIX.COM.         163522  IN      A       204.152.184.64
PRIMARY.ROTLD.ro.       169808  IN      A       192.162.16.18
SECONDARY.ROTLD.ro.     143759  IN      A       193.230.31.225

;; Query time: 89 msec
;; SERVER: 193.231.236.17#53(193.231.236.17)
;; WHEN: Fri Oct  8 12:28:57 2004
;; MSG SIZE  rcvd: 460

DNS check doesn't have major problems:
http://www.dnsreport.com/tools/dnsreport.ch?domain=galuna.ro

Restarting local named makes dig solve the request:

; <<>> DiG 9.2.4 <<>> marius.galuna.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15587
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;marius.galuna.ro.              IN      A

;; ANSWER SECTION:
marius.galuna.ro.       345600  IN      CNAME   galuna.ro.
galuna.ro.              345600  IN      A       213.157.162.252

;; AUTHORITY SECTION:
galuna.ro.              345600  IN      NS      ns1.galuna.ro.

;; Query time: 760 msec
;; SERVER: 81.196.83.211#53(81.196.83.211)
;; WHEN: Fri Oct  8 13:26:50 2004
;; MSG SIZE  rcvd: 82

Thanks
-- 
Marius Andreiana
Galuna - Solutii Linux in Romania
http://www.galuna.ro