Topic: Please help, DNS problems :(

[roba]

Hi Reaper82:

I too am having this problem.

-bash-3.00$ dig mail.stormfront.com.au ANY

; <<>> DiG 9.2.4 <<>> mail.stormfront.com.au ANY
;; global options:  printcmd
;; connection timed out; no servers could be reached

Another smilarity I notice is that both you and I are on internode for an ISP.

Im looking down that road at present.

[Marco Hess]

That is interesting, because I am on Internode too!

Without Corporate DNS configured I get:

Code: [Select]

dig mail.stormfront.com.au ANY

; <<>> DiG 9.2.4 <<>> mail.stormfront.com.au ANY
;; global options:  printcmd
;; connection timed out; no servers could be reached


and:

Code: [Select]

dig www.sun.com ANY

; <<>> DiG 9.2.4 <<>> www.sun.com ANY
;; global options:  printcmd
;; connection timed out; no servers could be reached



With Corporate DNS configured to the Internode DNS's (192.231.203.132 & 192.231.203.3) I get:

Code: [Select]

dig mail.stormfront.com.au ANY

; <<>> DiG 9.2.4 <<>> mail.stormfront.com.au ANY
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28223
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;mail.stormfront.com.au.                IN      ANY

;; ANSWER SECTION:
mail.stormfront.com.au. 68797   IN      CNAME   mail1.quadrahosting.com.au.

;; Query time: 50 msec
;; SERVER: 10.1.0.1#53(10.1.0.1)
;; WHEN: Sun Jan 21 17:43:56 2007
;; MSG SIZE  rcvd: 74


and:

Code: [Select]

dig www.sun.com ANY

; <<>> DiG 9.2.4 <<>> www.sun.com ANY
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37481
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.sun.com.                   IN      ANY

;; ANSWER SECTION:
www.sun.com.            740     IN      A       72.5.124.61

;; Query time: 64 msec
;; SERVER: 10.1.0.1#53(10.1.0.1)
;; WHEN: Sun Jan 21 17:41:51 2007
;; MSG SIZE  rcvd: 45


So why does SME DNS fail on these queries on Internode as the ISP?

Marco

[roba]

That is interesting, because I am on Internode too!

Without Corporate DNS configured I get:

Code: [Select]

dig mail.stormfront.com.au ANY

; <<>> DiG 9.2.4 <<>> mail.stormfront.com.au ANY
;; global options:  printcmd
;; connection timed out; no servers could be reached


and:

Code: [Select]

dig www.sun.com ANY

; <<>> DiG 9.2.4 <<>> www.sun.com ANY
;; global options:  printcmd
;; connection timed out; no servers could be reached



So what is this situation with Internode?

So why does SME DNS fail on these queries on Internode as the ISP?

Marco

I tried removing the new filtering that internode has, they make no mention of blocking DNS ports but it has clearly made a difference.

Turn off port filtering, wait 90 minutes, ower cycle modem to force a new login and its all come good.

I'm not saying this is a fix for a few weeks yet as the problem is definately intermittent, and power cycling the modem gives me a new IP obviously. I will have a chat with internode support tho, and possible learn to post on whirlpool.

Rob.

[Marco Hess]

Mhm, tried turning of Internode filtering, but does not seem to make a difference for me. e.g. after filterering turned off, 90min minimum wait, modem reset, new IP I get with the Corportate DNS still pointing to Internode:

Code: [Select]

dig sun.com ALL
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61787
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;sun.com.                       IN      A

;; ANSWER SECTION:
sun.com.                900     IN      A       72.5.124.61

;; Query time: 294 msec
;; SERVER: 10.1.0.1#53(10.1.0.1)
;; WHEN: Mon Jan 22 14:49:50 2007
;; MSG SIZE  rcvd: 41


; <<>> DiG 9.2.4 <<>> sun.com ALL
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12343
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ALL.                           IN      A

;; Query time: 83 msec
;; SERVER: 10.1.0.1#53(10.1.0.1)
;; WHEN: Mon Jan 22 14:49:51 2007
;; MSG SIZE  rcvd: 21
Then after I remove the Corporate DNS entries: I get:

Code: [Select]

dig sun.com ALL
;; connection timed out; no servers could be reached

; <<>> DiG 9.2.4 <<>> sun.com ALL
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58847
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;ALL.                           IN      A

;; Query time: 30 msec
;; SERVER: 10.1.0.1#53(10.1.0.1)
;; WHEN: Mon Jan 22 14:54:57 2007
;; MSG SIZE  rcvd: 21
So I am not sure Internode filtering is the culprit.

Is there a requirement to have DNS related ports open in my ADSL router/gateway? I currently have only TCP ports 25, 80, 443 and 1723 open which I thought to be the absolute minimum.

Marco

[CharlieBrady]

If you suspect anything is wrong with the SME server software you should report it via the Bug Tracker. This forum isn't an appropriate place to try to diagnose problems.

This remains true.

I don't understand why there is any "discussion" here. It should "just work". If it doesn't, there might be a bug, and the only place to diagnose problems (and track them to closure) is in the Bug Tracker.

[Marco Hess]

Ok, I have added this to the bug tracker.

[roba]

I don't understand why there is any "discussion" here. It should "just work". If it doesn't, there might be a bug, and the only place to diagnose problems (and track them to closure) is in the Bug Tracker.

Thats true Charlie, but at this stage I don't think its a bug as such, it is clearly working for others, at this stage I am more inclined to think it is an ISP issue, until someone else pops up with the problem who is NOT an internode customer.

Cheers,
          Rob.

[william_syd]

I am more inclined to think it is an ISP issue

However, if you did take it to the bug tracker then...

a. A resolution of what node *maybe* doing to cause the problems could be made.

b. SMEServer could be made 'node friendly'.

c. Documentation/FAQ could be updated to reflect possible issues.


At worst the bug is marked INVALID and case closed.

[rostons]

I am having the same problem whereby most internet sites work well and my email is good but a select few websites just don't wan't to play ball. It must be noted that they were working fine until yesterday. I am going to try and enter my ISP settings in the Corporate Domain and see what happens. I do believe though that it is NOT an SME server problem. Definately an underhanded ISP trick to drive us up the wall.

[rostons]

One of the websites came right after changing the corporate DNS settings but the other is still not working.

While trying to retrieve the URL: isp4u.co.za:443

The following error was encountered:

    * Connection Failed

The system returned:

    (110) Connection timed out

The remote host or network may be down. Please try the request again.

Your cache administrator is admin@3blokes.net.

I have phoned the company who hosts the site and the ISP and both can access it. WHat now?

Is there a way to change the MTU settings? This is very important as my ISP requires it to be 1352. Although I must say I have been running fine for over 3 months now without any problems.

[CharlieBrady]

I am having the same problem whereby most internet sites work well and my email is good but a select few websites just don't wan't to play ball. It must be noted that they were working fine until yesterday.

The DNS root name servers were all under DDoS attack yesterday.

http://www.ripe.net/news/global-root-server.html

[rostons]

Thanks 4 that. It is rather interesting. My stuff is all up and running now that I have put the DNS settings of the ISP into the Corporate Domain area.

Is there any word on how to set the MTU settings? Or how to check it?

[william_syd]

Code: [Select]

ifconfig

[rostons]

Thanks