Problem when Pinging domain nameserver

Problem when Pinging domain nameserver

[Daniel C]

Hello,
 
I have my zone file setup properly. Yet. when I ping a domain, for instance:
ping ns1.example.com
it comes back: pinging ns1.example.com.com
Why is that? did I screw something up?

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

Re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Make sure all the machines in your zone have a period at the end,
(I.E. ns1.example.com.). I noticed that the record for ns1 in your
zone didn't have that, but I didn't mention it, since your next
message said that you caught that problem. Wait a while, as in a few
hours, for your zone info to propagate, unless of course you are
querying your local name server when the ping command gets issued.

Greg


On Sat, Feb 16, 2008 at 04:35:20PM -0500, Daniel C wrote:
> Hello,
>  
> I have my zone file setup properly. Yet. when I ping a domain, for instance:
> ping ns1.example.com
> it comes back: pinging ns1.example.com.com
> Why is that? did I screw something up?
> 
> No virus found in this outgoing message.
> Checked by AVG Free Edition. 
> Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
> 7:08 PM
>  
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 

- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHt1k87s9z/XlyUyARAoGfAJ9Jhg1+xI4+7j79zpHbqmxa1BcTCQCfdY2Q
Tis2oQq23HT3UKXEnTohMDQ=
=Ycm1
-----END PGP SIGNATURE-----

RE: Problem when Pinging domain nameserver

[Daniel C]

I've acutally did some more research. Turns out that he only reason that I
was even allowed to ping my name server, or what I thought was mine, was
because resolv.conf had at the top:
Search net
Then below that, the nameserver addresses. I removed search net from
resolv.conf and changed the hosts file to read as:
127.0.0.1 localhost
67.35.73.178 danielcproductions.net
10.1.110.101 web01.danielcproductions.net
Hopefully I didn't screw anything up by making those changes.

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

Re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The hosts file is meant as a way of resolving machines on a small
local network, if you don't use a nameserver. Since you are running a
nameserver, ideally, the only entry in /etc/hosts should be for
127.0.0.1, localhost.

As for your resolv.conf, following your previous example, we'll assume
your domain is example.com, and that your name servers are
ns1.example.com (10.0.0.1), and ns2.example.com (10.0.0.2). So, with that in mind, your
/etc/resolv.conf should look like:

search example.com
nameserver 10.0.0.1
nameserver 10.0.0.2

Hth.

Greg


On Sat, Feb 16, 2008 at 05:02:40PM -0500, Daniel C wrote:
> I've acutally did some more research. Turns out that he only reason that I
> was even allowed to ping my name server, or what I thought was mine, was
> because resolv.conf had at the top:
> Search net
> Then below that, the nameserver addresses. I removed search net from
> resolv.conf and changed the hosts file to read as:
> 127.0.0.1 localhost
> 67.35.73.178 danielcproductions.net
> 10.1.110.101 web01.danielcproductions.net
> Hopefully I didn't screw anything up by making those changes.
> 
> No virus found in this outgoing message.
> Checked by AVG Free Edition. 
> Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
> 7:08 PM
>  
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 

- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHt2XB7s9z/XlyUyARAhabAJ9whLpJDKOWI2CEkOqdDYDqDBUQfgCeLwB0
a5hyTgYwy4OjTpXjMCNfDVA=
=SQMo
-----END PGP SIGNATURE-----

RE: Problem when Pinging domain nameserver

[Daniel C]

Because of the hosts file change, the server, at least the web and ftp
servers won't start now because they cannot resolve a name for my server
name.
My server's name is web01. So should I put the 1 line:
127.0.0.1 localhost web01?
As it stands now it looks like what was suggested earlier:
127.0.0.1 localhost
Resolv.conf looks like:
Search danielcproductions.net
Nameserver 205.152.144.23
Nameserver 205.152.132.23
Nameserver 10.1.110.101
The last nameserver being the local bind copy, the other 2 before that being
my 2 ISP ones.

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

Re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Feb 16, 2008 at 06:01:57PM -0500, Daniel C wrote:
> Because of the hosts file change, the server, at least the web and ftp
> servers won't start now because they cannot resolve a name for my server
> name.
> My server's name is web01. So should I put the 1 line:
> 127.0.0.1 localhost web01?

Yes, that should fix it.

> The last nameserver being the local bind copy, the other 2 before that being
> my 2 ISP ones.

That's fine. However, if your bind is working correctly, there's no
reason to use your isp's servers, unless you really want to. If you do
want to use your isp's server, then the way to really do this is to
have only your local bind in resolv.conf, and to setup a forwarders
section in your bind config, pointing it at your isp's server. You
should however leave doing that for when you're comfortable with bind,
and once you're sure your copy of bind works as expected.

Greg


> 
> No virus found in this outgoing message.
> Checked by AVG Free Edition. 
> Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
> 7:08 PM
>  
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 

- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHt3S+7s9z/XlyUyARAu/fAJ414HNquWzgycwe97S6RNjIbLhOtQCgniTE
SwFP97koTIB+SC86r84QS3M=
=+Xgg
-----END PGP SIGNATURE-----

RE: Problem when Pinging domain nameserver

[Daniel C]

Strange. I added that line: 127.0.0.1 localhost web01  but it still doesn't
work.
Going to take out the 2 isp servers in resolv.conf and reboot the machine.

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

Re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I don't think that pulling the isp servers from resolv.conf will help
there. You do have a separate zone for localhost, after you pulled it
out of your regular zone, right? Also, you need to be sure the names
you assigned to your web and ftp servers are dns-resolvable. I know
that apache cares about this, I'm not sure if proftpd or vsftp, or
whatever you use cares. I get around that by having the virtualhosts
pointed at my public ip, rather then having them as regular names. It
might help too to know what kind of an error your web and ftp servers
are giving you when refusing to start.

Greg


On Sat, Feb 16, 2008 at 06:57:56PM -0500, Daniel C wrote:
> Strange. I added that line: 127.0.0.1 localhost web01  but it still doesn't
> work.
> Going to take out the 2 isp servers in resolv.conf and reboot the machine.
> 
> No virus found in this outgoing message.
> Checked by AVG Free Edition. 
> Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
> 7:08 PM
>  
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 

- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHt3x77s9z/XlyUyARAiKTAJ9mWsuWCcwTmA50xC3/j2u6X8RsNQCdF1q3
v9OtCS5Fa3j4xXuV1aHc3kI=
=MmFq
-----END PGP SIGNATURE-----

RE: Problem when Pinging domain nameserver

[Daniel C]

Hi,
First off thanks for your help. Secondly, I've restored my old hosts file
which had, 127.0.0.1 localhost in it. My resolv.conf file has the lines:
Search danielcproductions.net
Nameserver 10.1.110.101
In it. Now for my danielcproductions.net.zone file:

; BIND db file for danielcproductions.net
$TTL 86400
@	IN	SOA	ns1.danielcproductions.net. topdog2046.gmail.com. (
			2008021604
			28800
			7200
			864000
			86400 )

                NS      ns1.danielcproductions.net 
               NS      ns2.danielcproductions.net. 

                MX      10 mail.danielcproductions.net.
$ORIGIN danielcproductions.net.
danielcproductions.net.	IN	A	67.35.73.178
web01.danielcproductions.net.	IN	A	67.35.73.178
www.danielcproductions.net.	IN	CNAME	danielcproductions.net.
I believe that bind has added the web01 in the danielcproductions.net.zone
file with the public IP.
I'm looking at webmin and see the root zone and the danielcproductions.net
zone. No other zones are there, although since bind has added the entry both
httpd and ftp are no longer complaining.

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

Re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, Feb 16, 2008 at 08:11:36PM -0500, Daniel C wrote:
> First off thanks for your help. Secondly, I've restored my old hosts file
> which had, 127.0.0.1 localhost in it. My resolv.conf file has the lines:

That's fine. On my server, I have localhost, as well as the server's
name. I remember there was a reason why I did that, but I don't
remember what the reason was anymore. I suppose I'll find out if I
ever have to setup from scratch.

> ; BIND db file for danielcproductions.net
> $TTL 86400
> @	IN	SOA	ns1.danielcproductions.net. topdog2046.gmail.com. (
> 			2008021604
> 			28800
> 			7200
> 			864000
> 			86400 )
> 
>                 NS      ns1.danielcproductions.net 

You want a period at the end of that, as in ns1.danielcproductions.net.

> I believe that bind has added the web01 in the danielcproductions.net.zone
> file with the public IP.

I assumed it was in your zone originally, but since I've deleted your
previous post, I couldn't go back to look. If it wasn't there
originally though, that would explain why your ftp and web servers
were complaining about it, and refusing to start.

> I'm looking at webmin and see the root zone and the danielcproductions.net
> zone. No other zones are there, although since bind has added the entry both
> httpd and ftp are no longer complaining.

You probably don't really need a zone for localhost, though I myself
had one when I first started with my own domain, and found one was
already provided with bind by default, when I moved to debian. I've
also seen docs on the web recommending that you create one. 

Greg


- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHt5dE7s9z/XlyUyARAr6MAJ9Y5+a3Pd9fpq2CqZe9YyZeEVVgiACg3k3g
geGC0o1/wbTXEqq0hYralRY=
=Bz5/
-----END PGP SIGNATURE-----

RE: Problem when Pinging domain nameserver

[Daniel C]

Ok I've fixed that to be ns1.danielcproductions.net. And
ns2.danielcproductions.net in the zone file now.
It didn't complain about it before though, wonder why that is?
Also, it let me change the soa which is odd. It was 2008021604 but I changed
it back to 2008021601 and restarted named. Was I not suppose to change the
soa back? If I wasn't, guess I should leave it how bind had it lol.

I registered my nameservers with godaddy a long time ago. When should I be
able to ping my name servers on the local box? When I ping them I get the
following message:
[root@web01 ~]#
ping ns1.danielcproductions.net
ping: unknown host ns1.danielcproductions.net
[root@web01 ~]#
[root@web01 ~]#
ping ns2.danielcproductions.net
ping: unknown host ns2.danielcproductions.net
[root@web01 ~]#
When I do an nslookup it says:
[root@web01 ~]# nslookup ns1.danielcproductions.net 
Server: 10.1.110.101
Address: 10.1.110.101#53
 ** server can't find ns1.danielcproductions.net: NXDOMAIN
[root@web01 ~]#
[root@web01 ~]# nslookup ns2.danielcproductions.net 
Server: 10.1.110.101
Address: 10.1.110.101#53
 ** server can't find ns2.danielcproductions.net: NXDOMAIN
[root@web01 ~]#
 This is on the local box where bind is running where these arrors are
showing up at. Could it be that the name servers have to be cashed with bind
first? Or could it be that port 53 has to be forwarded to the box running
bind?
As it stands now, port 53, DNS, is not forwarded anywhere.
Again, thanks for the help.

No virus found in this outgoing message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.20.6/1282 - Release Date: 2/15/2008
7:08 PM
 

re: Problem when Pinging domain nameserver

[Gregory Nowak]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel C,

I wrote a detailed response to the problems you're seeing
yesterday. Unfortunately, I forgot to watch how big the reply is, and
it was over the 5k limit, which means that it's waiting for moderator
approval. I see that Kirk hasn't approved it, or not approved it as of
yet.

I'm not going to explain all that I explained in the held message all
over again. In a nutshell, your local name server isn't serving your
zone. Why? I don't know, look at your logs.

Kirk, if you could please let the detailed reply to this thread
through, that would be great, and thanks. I'll try to remember to
watch the reply length next time. I'm also keeping this on the list,
since it is gnu/linux related, and since I want to give others the
opportunity to chime in, and correct me, or add onto whatever I've
said.

Greg


- -- 
web site: http://www.romuald.net.eu.org
gpg public key: http://www.romuald.net.eu.org/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

- --
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHuKvq7s9z/XlyUyARAq68AJ4roDv+mkehp6AWaI6sfsCSkwKlggCcD80j
6FNWJYch/ONE65DTLZv9S8Q=
=Lu4q
-----END PGP SIGNATURE-----