Topic: Please help, DNS problems :(

[raem]

Reaper82

> I did read the links and that is what drew me to check my work
> domains configuration,  which requires action.  

What about jbhifi.com.au and www.jbhifi.com.au, are they sites you own & host elsewhere or host on your sme server ?

[Reaper82]

I have nothing to do with that site.  The only one I host is the computer-rescue.com.au

jbhifi.com.au along with google, whirlpool.net.au and numerous others were a few in a long list of sites I couldn't access starting around 2 weeks ago and lasted about 10 days.

If you check the original log I posted the issue was different then but the symptoms were the same.  Google,  whirlpool and most of these other sites have been working fine for the last 4-5 days (and would work 1 minute and not the next).  This is what I believed was happening now but I was proven wrong.  I have never found a reason for the original problem,  but it has mostly resolved itself from what I can see.

I've put up the full log from the 19th of September (in the middle of the original problem) which shows the sites working then failing minutes later.  

http://www.users.on.net/~reaper82/dnscache%20current

The solution you brought up was for a different and unrelated issue (which thanks to your help I can fix for my site but can't do much for the other).

[raem]

Reaper82

OK it's coincidence then that DNS records for jbhifi sites are broken.

> The solution you brought up was for a different and unrelated issue
> (which I can fix for my site but can't do much for the other).

You could contact jbhifi and let them know, if you really want to get to their web site.

[Reaper82]

I had thought about that but it is low priority.  I can just as easily access it from work via RDP/SSH (or even use works proxy if I can be bothered setting up a tunnel).

It was just that I mistakenly thought the issues were related and used it as an example though in hindsight it was an incorrect assumption on my part.

[Marco Hess]

Similar to what is discussed here, I have a problem accessing sun.com where the DNS times out and does not return an IP address. So far this is the only site where I noticed this problem. Everything else seems to resolve OK.

@40000000452c47ee38acd3c4 servfail www.sun.com. input/output error
@40000000452c47ee38acef1c sent 40 29
@40000000452c47ef37998b1c servfail www.sun.com. input/output error
@40000000452c47ef3799a674 sent 41 29
@40000000452c47f038cab434 servfail www.sun.com. input/output error
@40000000452c47f038cad374 sent 42 29
@40000000452c47f238c96ffc servfail www.sun.com. input/output error
@40000000452c47f238c99324 sent 43 29
@40000000452c47f638d6e934 servfail www.sun.com. input/output error
@40000000452c47f638d70874 sent 44 29

However when I use http://www.the-cloak.com/anonymous-surfing-home.html and type in www.sun.com it brings up the page, so the site is up and running but from my server the DNS does not resolve anything.

I am not sure this is an SME7 problem, but in looking for the issue I did notice that /etc/dnsroots.global seems to be out of date with the current root servers when compared to:

Code: [Select]


dnsip `dnsqr ns . | awk '/answer:/ { print $5; }' |sort`


However, updating /etc/dnsroots.global with that updated list (and restarting the service) does not fix the problem. Neither is it fixed when I replace the contents of /var/service/dnscache/root/servers/@ with the list of root servers.

Anybody any ideas?

(Alternatively does anybody know where I can download the Java SDK for my SME server?)

[william_syd]

(Alternatively does anybody know where I can download the Java SDK for my SME server?)

Java Thread.

[raem]

thf

> www.sun.com

Works fine for me using updated sme7

There are some minor irregularities see
http://www.dnsreport.com/tools/dnsreport.ch?domain=www.sun.com

Have you pointed your server at a different DNS server or is your sme the DNS server ? See Review Configuration panel in server manager.

[Marco Hess]

RayMitchell,
No, this is a box standard SME7 server will all the available updates. No external DNS or things like that. The server is the DNS server for the local network. PC's are all auto configured with DHCP.

As far as I know it is only sun.com that does not respond
and it is the same from web browsers or the server command line:

Code: [Select]

-bash-3.00$ dnsip ns1.sun.com
192.18.128.11
-bash-3.00$ dnsip sun.com
dnsip: fatal: unable to find IP address for sun.com: timed out


Regards, Marco

[raem]

thf

I get

dnsip ns1.sun.com
192.18.128.11

dnsip ns.sun.com
192.9.9.3

dnsip sun.com
72.5.124.61

dnsip www.sun.com
72.5.124.61

[Marco Hess]

RayMitchell,
That is interesting as I get a timeout on ns.sun.com as well as sun.com.a dn www.sun.com.

Code: [Select]

-bash-3.00$ dnsip ns.sun.com
dnsip: fatal: unable to find IP address for ns.sun.com: timed out

Marco

[Marco Hess]

Just an interesting twist in this saga. In the server manager "Domains" section, I just modified the Corporate DNS settings to use my ISP DNS servers and voila the www.sun.com site appears!

Not sure what to think of this now. Could this be a SME7 DNS bug?

Marco

[CharlieBrady]

I've put up the full log from the 19th of September (in the middle of the original problem) which shows the sites working then failing minutes later.  

http://www.users.on.net/~reaper82/dnscache%20current

You'd need to look at the dnscache.forwarder logs to get any idea of what is going wrong.

[CharlieBrady]

Could this be a SME7 DNS bug?

Sure, anything which doesn't work correctly could be an SME bug.

[Marco Hess]

I looked at the dnscache.forwarded log but I am not sure what I am looking at. Here is a snippet from what I believe are transactions just prior to the Corporate DNS reconfiguration followed by mathing errors a while later.

Code: [Select]

@40000000452d7d200ed4edac query 2515 7f000002:1552:6a74 1 java.sun.com.
@40000000452d7d200ed510d4 cached ns sun.com. ns1.sun.com.
@40000000452d7d200ed51c8c cached ns sun.com. ns2.sun.com.
@40000000452d7d200ed52844 cached ns sun.com. ns7.sun.com.
@40000000452d7d200ed533fc cached ns sun.com. ns8.sun.com.
@40000000452d7d200ed5439c cached 1 ns1.sun.com.
@40000000452d7d200ed54b6c cached 1 ns2.sun.com.
@40000000452d7d200ed55724 cached 1 ns7.sun.com.
@40000000452d7d200ed562dc cached 1 ns8.sun.com.
@40000000452d7d200ed5cc54 tx 0 1 java.sun.com. sun.com. c0122b0c c0126305 c012800b c0122a0c
@40000000452d7d23100357a4 query 2516 7f000002:aaae:b12f 1 java.sun.com.
@40000000452d7d23100376e4 cached ns sun.com. ns1.sun.com.
@40000000452d7d231003829c cached ns sun.com. ns2.sun.com.
@40000000452d7d2310038e54 cached ns sun.com. ns7.sun.com.
@40000000452d7d2310039df4 cached ns sun.com. ns8.sun.com.
@40000000452d7d231003a9ac cached 1 ns1.sun.com.
@40000000452d7d231003b564 cached 1 ns2.sun.com.
@40000000452d7d231003bd34 cached 1 ns7.sun.com.
@40000000452d7d231003c8ec cached 1 ns8.sun.com.
@40000000452d7d2310043264 tx 0 1 java.sun.com. sun.com. c0126305 c0122a0c c0122b0c c012800b
@40000000452d7d240ee30af4 query 2517 7f000002:47bd:9cbb 1 java.sun.com.
@40000000452d7d240ee3840c cached ns sun.com. ns1.sun.com.
@40000000452d7d240ee38fc4 cached ns sun.com. ns2.sun.com.
@40000000452d7d240ee39f64 cached ns sun.com. ns7.sun.com.
@40000000452d7d240ee3ab1c cached ns sun.com. ns8.sun.com.
@40000000452d7d240ee3b6d4 cached 1 ns1.sun.com.
@40000000452d7d240ee3c28c cached 1 ns2.sun.com.
@40000000452d7d240ee3ce44 cached 1 ns7.sun.com.
@40000000452d7d240ee3d614 cached 1 ns8.sun.com.
@40000000452d7d240ee3e1cc tx 0 1 java.sun.com. sun.com. c0122b0c c0122a0c c0126305 c012800b


Many other entries removed, but I think the the above and below are the matching transaction numbers.

Code: [Select]

@40000000452d7e102211d31c sent 2515 30
@40000000452d7e13234fd544 servfail java.sun.com. input/output error
@40000000452d7e13234ff484 sent 2516 30
@40000000452d7e14221f5fdc servfail java.sun.com. input/output error
@40000000452d7e14221f7f1c sent 2517 30


The above errors are the last failures just before what I suspect is the  point where I reconfigured the Corporate DNS and I assume the cache was restarted.

Code: [Select]

@40000000452d7e153a5e19bc starting

And right after this the query to java.sun.com where it is going right.

Code: [Select]

@40000000452d7e2c1588795c query 1 7f000002:906c:1752 1 java.sun.com.
@40000000452d7e2c15889c84 tx 0 1 java.sun.com. . c0e7cb84 c0e7cb03
@40000000452d7e2c166cda34 rr c0e7cb84 18142 1 ns1.sun.com. c012800b
@40000000452d7e2c166cf58c rr c0e7cb84 18142 1 ns2.sun.com. c0126305
@40000000452d7e2c166d0144 rr c0e7cb84 18142 1 ns7.sun.com. c0122a0c
@40000000452d7e2c166d10e4 rr c0e7cb84 18142 1 ns8.sun.com. c0122b0c
@40000000452d7e2c166d1c9c rr c0e7cb84 692 1 java.sun.com. 48057c37
@40000000452d7e2c166d2c3c rr c0e7cb84 18041 ns sun.com. ns2.sun.com.
@40000000452d7e2c166d37f4 rr c0e7cb84 18041 ns sun.com. ns7.sun.com.
@40000000452d7e2c166d4794 rr c0e7cb84 18041 ns sun.com. ns8.sun.com.
@40000000452d7e2c166de3d4 rr c0e7cb84 18041 ns sun.com. ns1.sun.com.
@40000000452d7e2c166df374 stats 1 279 1 0
@40000000452d7e2c166dff2c sent 1 46
@40000000452d7e31313bb8bc query 2 7f000002:afe5:4841 1 developers.sun.com.
@40000000452d7e31313bd414 tx 0 1 developers.sun.com. . c0e7cb03 c0e7cb84
@40000000452d7e313220830c rr c0e7cb03 125228 1 ns1.sun.com. c012800b
@40000000452d7e3132209e64 rr c0e7cb03 125228 1 ns2.sun.com. c0126305
@40000000452d7e313220ae04 rr c0e7cb03 125228 1 ns7.sun.com. c0122a0c
@40000000452d7e313220bda4 rr c0e7cb03 125228 1 ns8.sun.com. c0122b0c
@40000000452d7e313220c95c rr c0e7cb03 8921 1 developers.sun.com. 48057c41
@40000000452d7e313220d8fc rr c0e7cb03 26246 ns sun.com. ns1.sun.com.
@40000000452d7e313220e4b4 rr c0e7cb03 26246 ns sun.com. ns2.sun.com.
@40000000452d7e313220f454 rr c0e7cb03 26246 ns sun.com. ns7.sun.com.
@40000000452d7e3132219864 rr c0e7cb03 26246 ns sun.com. ns8.sun.com.
@40000000452d7e313221a804 stats 2 564 1 0
@40000000452d7e313221b3bc sent 2 52


The differnee seems to be that in the bad case right after the query statement there is a bunch of cached statements (repeated for each query) and only after that a tx statement, while in the good case we don't see these cached statements and the tx is right after the query and followed by a whole bunch of rr statements.

Please note that is just my observations. I have no idea what these lines means.

Any ideas?

[CharlieBrady]

Here is a snippet from what I believe are transactions just prior to the Corporate DNS reconfiguration ...

Looks perfectly normal.

Code: [Select]

@40000000452d7e102211d31c sent 2515 30
@40000000452d7e13234fd544 servfail java.sun.com. input/output error
@40000000452d7e13234ff484 sent 2516 30
@40000000452d7e14221f5fdc servfail java.sun.com. input/output error
@40000000452d7e14221f7f1c sent 2517 30


The above errors are the last failures just before what I suspect is the  point where I reconfigured the Corporate DNS and I assume the cache was restarted.

There is not enough information in the log there to determine what is happening.

If you suspect anything is wrong with the SME server software you should report it via the Bug Tracker. This forum isn't an appropriate place to try to diagnose problems.