From owner-freebsd-questions@FreeBSD.ORG Wed Nov 10 00:29:57 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E288716A4CE for ; Wed, 10 Nov 2004 00:29:57 +0000 (GMT) Received: from mproxy.gmail.com (mproxy.gmail.com [216.239.56.245]) by mx1.FreeBSD.org (Postfix) with ESMTP id 84A9A43D2F for ; Wed, 10 Nov 2004 00:29:57 +0000 (GMT) (envelope-from niyamas@gmail.com) Received: by mproxy.gmail.com with SMTP id w67so111778cwb for ; Tue, 09 Nov 2004 16:29:52 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:mime-version:content-type:content-transfer-encoding; b=r0nkd1rLhKlPjgdqGcZC05Xw9eqTvuyLwMW2NWyJqIHcqW0iTFcSW7+eVTHvM9/zhp4FrvvJasp3c0n6JkRUjbUr3I0I5Is2/43f/0Z75v26BxHFBkSba37lcT5Q5UGNQwdQuLj6ZNaRHCCcjK20CQ7K/hPfWXLqWc9uSK363ms= Received: by 10.11.117.43 with SMTP id p43mr888272cwc; Tue, 09 Nov 2004 16:29:52 -0800 (PST) Received: by 10.11.119.47 with HTTP; Tue, 9 Nov 2004 16:29:52 -0800 (PST) Message-ID: <4f9c6b6d0411091629290392f7@mail.gmail.com> Date: Tue, 9 Nov 2004 19:29:52 -0500 From: NiY To: drew@mykitchentable.net Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: questions@freebsd.org Subject: Re: DNS Cache Server X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Niy@extacy.homeip.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2004 00:29:58 -0000 On 11/9/2004 4:01 PM NiY wrote: > Noticed the tread on a caching DNS server, and that brought up a > couple of questions I had. > I have a DNS server set up in my home. I have a FreeBSD 5.2.1 box > acting as my gateway, running ipfw and natd. It routes my one static > IP address from my DSL provider to a set of internal, unroutable IPs. > That part is working fine. Also on that box is a caching DNS server. > The internal IP for the gateway is 192.168.0.1. My problems are two > fold, and may or may not be related. > > 1) I cannot, from either the gateway or any of the internal machines, > get DNS query responses from 192.168.0.1. I can get query responses > from 127.0.0.1 and the external IP address from the gateway, and I can > get query responses from the external IP from any of the internal > machines (well, partially. See below). > > 2) When I do set up my FBSD 5.3 box inside the network with the > external IP of the gateway in resolv.conf, I can ping and nslookup DNS > names just fine. However, when I go to use Mozilla (Or any browser for > that matter), they hang on "Resolving host:". nslookup tells me it is > using my gateway as the DNS server, and never tells me it's switching > to another server for queries. > > Any ideas? > Are you running some sort of packet filter? If you are, I'd try turning it off and then see if you still have problems. If you do, then you know that you need to modify your rules to allow the traffic through the internal interface. HTH, -- Visit The Alchemist's Warehouse Magic Tricks, DVDs, Videos, Books, & More! http://www.alchemistswarehouse.com ---------------------------------------------------------------------------------------------------------- I am using ipfw, and am not deying anything on the internal network. I do some filtering on traffic coming into the gateway from the external IP, but nothing on any of the internal IPs. What I'm denying inbound shouldn't have anything to do with DNS, either. Just to be sure, I did set the default type to open and used a blank ipfw config, but that didn't help any.