queer dns access problem

[Bill Tangren]

> Is the DNS server on the same subnet?  Can you verify your default route?

No, and not sure, respectively.

Broken server is on 10.1.5.x subnet. Both DNS servers are on 10.1.1.x subnet.

The path should be server to switch to firewall to switch to DNS. Firewall
is not recording the traffic.

>
>
> ----- "Bill Tangren" <bjt at usno.navy.mil> wrote:
>> > is there an inverse-map (in-addr.arpa) entry in the dns for the
>> > "broken" box"? also, does the dns server that the "broken" box is
>> > using have access control (that does not include the ipnumber for
>> the
>> > "broken" box)?
>> >
>> > that the "broken" box can't reach its dns servers is as likely a
>> > problem on the dns server side as that of the "broken" box.
>>
>> Yes.
>>
>> I have the same problem when I change the system name and IP to a
>> system
>> that does work (unplugging that system from the network first, of
>> course).
>>
>> >
>> >
>> > this part of your debug:
>> >
>> >> debug1: An invalid name was supplied
>> >> Cannot determine realm for numeric host address
>> >>
>> >
>> > is why i question the existence of an in-addr.arpa entry.
>> >
>> >
>> >   - Rick
>> >
>> >