Re: [MaraDNS list] Fwd: MaraDNS doesn't respond to queries from the bind addr subnet

--N9YKApZF72I1Fi09
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Jun 05, 2013 at 09:50:32AM -0700, Dave wrote in=20
<CA+OQrzjE=3DfsUNbhQDesgXqSF_rvs+Qis4N02=3DiuAvYwtMj9zhA@mail.gmail.com>:
>Hi Sam and list members,
>
>I have a mararc.base like this:
>
>ipv4_bind_addresses =3D "192.168.50.250"
>synth_soa_origin =3D "ns1.teamunify.net"
>maradns_uid =3D 65500
>maradns_gid =3D 65500
>chroot_dir =3D "/etc/maradns"
>default_rrany_set =3D 15
>verbose_level =3D 2
>hide_disclaimer =3D "yes"
>tcp_convert_acl =3D "0.0.0.0/0"
>tcp_convert_server =3D "192.168.50.250"
>recursive_acl =3D "192.168.50.0/24, 10.10.0.0/16, 127.0.0.1"
>csv2 =3D {}
>
>I have added a record to the teamunify.com.zone file like this:
>
>topica.%      192.168.50.141 ~
>
>I am able to get the A record returned when I query the server from the
>local subnet.  I am not able to get the A record returned when I query the
>server remotely.
>
>Logging at verbose_level =3D 3 shows that MaraDNS does receive the query:
>Query from: $PUBLIC_IP Atopica.teamunify.com.
>...but there are no errors in the log related to the query.
>
>We have other private IP A records in that zone file, and all can return A
>records when queried remotely.  None of the working addresses are in the
>192.168.50.0/24 subnet, however.

Hi Dave,

While I don't know the answer to your query right now... am I correct in=20
understanding that remotely querying for an address with an A record in=20
the 10.10 range for example works?

What version of maradns are you using?

Then, I notice the use of both teamunify.net and teamunify.com domains=20
in your example. Is that not causing any issues / explain the difference=20
between the internal and external set up?

[remmy@silvertown ~ (master)]$ askmara Atopica.teamunify.com.=20
208.100.130.99
# Querying the server with the IP 208.100.130.99
# Hard Error: Timeout
[remmy@silvertown ~ (master)]$ askmara Atopica.teamunify.net.=20
208.100.130.99
# Querying the server with the IP 208.100.130.99
# Remote server said: NAME ERROR
# Question: Atopica.teamunify.net.
# NS replies:
#teamunify.net. +86400 soa ns1.teamunify.net. [email protected].=20
176478890 7200 3600 604800 3600
# AR replies:

The timeout in the first commands makes me ask: Any firewalling in place?

Remmy

--N9YKApZF72I1Fi09--