Hej !
Jeg har en Linuxbox der hjemme som er Master dns og Mail server for mit
domæne. Jeg bruger postfix og imap.
I dag kunne jeg plutselig ikke hente mail fra serveren.
Fejlbeskeden i Thunderbird er "failed to connect to mail.al-data.dk"
Jeg er ganske sikker på at det er named der ikke vil resolve
mail.al-data.dk. Hvis jeg laver en dig @192.168.1.1 mail.al-data.dk kommer
; <<>> DiG 9.2.2-P3 <<>> @192.168.1.1 mail.al-data.dk
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55561
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;mail.al-data.dk. IN A
;; Query time: 35 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Fri Jan 23 14:13:45 2004
;; MSG SIZE rcvd: 33
named svarer fint om andre domæner udenfor.
I /var/log/messages har jeg en masse lame server resolving beskeder.
Mærkelig er det at tidspunktet er forkert for disse beskeder:
Jan 23 07:37:12 linuxbox named[1717]: lame server resolving 'mail.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:37:12 linuxbox named[1717]: lame server resolving 'mail.al-data.dk.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:37:12 linuxbox named[1717]: lame server resolving 'mail.al-data.dk.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 13:37:39 linuxbox ntpd[1763]: kernel time discipline status change 1
Jan 23 07:38:11 linuxbox named[1717]: lame server resolving 'mail.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:38:11 linuxbox named[1717]: lame server resolving 'mail.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:38:11 linuxbox named[1717]: lame server resolving 'mail.al-data.dk.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:38:11 linuxbox named[1717]: lame server resolving 'mail.al-data.dk.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jan 23 07:38:11 linuxbox named[1717]: lame server resolving 'mail.al-data.dk' (in 'al-data.dk'?): 80.198.19.168#53
Jeg har prøvet at genstarte named uden at det hjalp. named giver ikke
fejlbeskeder ved genstart.
Lidt oplysninger om opsætning: ip-adresse for dns-server: 80.198.19.168.
Domæne: al-data.dk. BIND 9.2.2-P3. Fedora Linux Core 1 med alle
opdateringer.
Det er noget tid siden jeg satte dns-serveren op på en Redhat 7.2.
Jeg flyttede så konfigurationsfilerne over til en Fedora for ca 14 dage
siden, den har virket fint indtil nu.
/etc/named.conf:
// Set up an ACL named "bogusnets" that will block RFC1918 space,
// which is commonly used in spoofing attacks.
acl bogusnets { 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; 10.0.0.0/8; 172.16.0.0/12; };
// Set up an ACL called our-nets. Replace this with the real IP numbers.
acl our-nets { 192.168.1.0/24;80.62.226.156;195.249.157.109;194.0.0.0/8;129.0.0.0/8;193.0.0.0/8; };
// generated by named-bootconf.pl
options {
directory "/usr/local/named";
auth-nxdomain yes; # conform to RFC1035
allow-query { any; };
allow-recursion { any; };
blackhole { bogusnets; };
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "al-data.dk" IN {
type master;
file "db.al-data";
allow-update { none; };
allow-query { any; };
};
zone "168.19.198.80.in-addr.arpa" IN {
type master;
file "db.80.198.19.168";
allow-update { none; };
allow-query { any; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "db.127.0.0";
allow-update { none; };
allow-query { any; };
};
zone "." IN {
type hint;
file "db.cache";
};
db.80.198.19.168:
$TTL 1d
168.19.198.80.in-addr.arpa. IN SOA linuxbox.al-data.dk. root.linuxbox.al-data.dk. (
5 ; serial
10800 ; Refresh after 3 hours
3600 ; Retry after 1 hour
604800 ; Expire after 1 week
86400 ) ; Minimum TTL of 1 day
;
; Name Servers
;
168.19.198.80.in-addr.arpa. IN NS linuxbox.al-data.dk.
;
; Adresses point to canonical name
;
168.19.198.80.in-addr.arpa. IN PTR linuxbox.al-data.dk.
db.al-data.dk:
$TTL 1d
al-data.dk. IN SOA linuxbox.al-data.dk. root.linuxbox.al-data.dk. (
5 ; serial
10800 ; Refresh after 3 hours
3600 ; Retry after 1 hour
604800 ; Expire after 1 week
86400 ) ; Minimum TTL of 1 day
;
; Primary and secondary Name server and Mail
;
al-data.dk. IN NS linuxbox.al-data.dk.
al-data.dk. IN NS ns2.cserver.dk.
al-data.dk. IN MX 10 mail.al-data.dk.
al-data.dk. IN MX 20 backup-mx.post.tele.dk.
;
; Host adresses
;
localhost.al-data.dk. IN A 127.0.0.1
linuxbox.al-data.dk. IN A 80.198.19.168
mail.al-data.dk. IN A 80.198.19.168
;
; aliases
;
www.al-data.dk. IN CNAME linuxbox.al-data.dk.
Jeg er temmelig rusten i dns opsætning, så jeg håber nogen
kan hjælpe.
Martin.