Dns problem

**fedora999** · 10-20-2008, 09:46 PM

Through Bind's GUI, I did a forward address of our website's address with the server's IP address and zoneedit's.

I blocked the telnet feature in our webserver. Is that part of the problem?

How do you do the curl command?

What is your direct email address so I can PM you.

Thanks.

**starfish** · 10-21-2008, 01:28 AM

Curl is a Linux utility that you can use to get the contents of a remote web page.

You can use telnet to test connectivity. This example tries to test connectivity on the TCP HTTP port 80.

Code:

 
# telnet www.mysite.com 80

BIND doesn't come with a GUI. Is this the zone edit interface? If forwarding is th esame as a DNS A record, then you should only have one entry listed. That of the webserver.

What is the domain you are having issue with? Post it and many more people will be able to help.

**fedora999** · 10-21-2008, 04:13 AM

Okay, I tried telnet and the response i got is: failed to connect.

HTTP port 80 is already open. Okay, here's the domain name: www.whitehorse12.com. We are using this domain for testing purposes only to make our DNS servers and webservers work. If we cannot make it work with this domain name then it will not work with our actual domain name.

Thanks.

**starfish** · 10-21-2008, 06:15 AM

Here is the output for dig

Code:

# dig whitehorse12.com
;; ANSWER SECTION:
whitehorse12.com.       6679    IN      A       216.98.141.250
whitehorse12.com.       6679    IN      A       69.72.142.98
;; AUTHORITY SECTION:
whitehorse12.com.       6679    IN      NS      host.whitehorse12.com.
whitehorse12.com.       6679    IN      NS      ns15.zoneedit.com.
whitehorse12.com.       6679    IN      NS      ns13.zoneedit.com.

You should only have one IP address entry for whitehorse12.com. This should be your web server IP address only.

You have host.whitehorse12.com listed as a DNS server, but this server isn't listening on DNS port 53 as seen by the telnet test. Proof also comes from the fact that this host isn't responding to DNS queries at all for whitehorse12.com. If it is not a DNS server, it needs to be removed form the NS server list.

Code:

# telnet host.whitehorse12.com 53
# host www.whitehorse12.com host.whitehorse12.com
# host whitehorse12.com host.whitehorse12.com

The other listed NS servers don't have listings for www.whitehorse12.com.

Code:

 
# host www.whitehorse12.com ns15.zoneedit.com
Using domain server:
Name: ns15.zoneedit.com
Address: 69.10.134.195#53
Aliases: 
#

There are entries for whitehorse12.com on the zoneedit servers. But it is returning two IP addresses. The first, 216.98.141.250, is the IP address of a zone edit DNS server, not your webserver IP address. There shold be only one entry listed. I suspect the correct entry should be 69.72.142.98.

Code:

 
# host whitehorse12.com ns15.zoneedit.com
Using domain server:
Name: ns15.zoneedit.com
Address: 69.10.134.195#53
Aliases: 
whitehorse12.com has address 216.98.141.250
whitehorse12.com has address 69.72.142.98
whitehorse12.com mail is handled by 0 mail7.zoneedit.com.
whitehorse12.com mail is handled by 0 mail6.zoneedit.com.
#

IP address 69.72.142.98 is listening on port 80 and has Apache running. This is probably your web server. I get a 200 OK message when doing a curl head command.

Code:

 
# curl -I 69.72.142.98
HTTP/1.0 200 OK
Server: Apache
Status: 200 OK
Expires: Wed, 22 Oct 2008 06:02:44 GMT
Date: Tue, 21 Oct 2008 06:02:44 GMT
Content-Type: text/html; charset=ISO-8859-1
#

Using curl to get the entire contents of the page gives a blank. So it looks like the website isn't running as a virtual host using just the IP address.

Code:

 
# curl 69.72.142.98
#

Curl specifying the URL whitehorse12.com gets a proxy prompt, which is probably the correct website you have running.

Code:

 
# curl -U whitehorse12.com 69.72.142.98
Enter proxy password for user 'whitehorse12.com':
#

If you fix the name server issues listed, then you should be able to get it all to work.

**fedora999** · 10-21-2008, 07:01 AM

Hello Starfish,

I did some changes and some corrections. Do you mind accessing the test webpage now?

Thanks.

**starfish** · 10-21-2008, 07:17 AM

Same symptoms as before.

**fedora999** · 10-21-2008, 11:52 PM

I tried it again and I can only access the webpage internally via IP and using the domain name.
The host.whitehorse12.com is the DNS server that I am trying to set up/configure which also hosts the whitehorse12.com's webpage at the same time. Is this a part of the problem?

When I did the dig command, I don't see this:
whitehorse12.com. 6679 IN A 216.98.141.250

I don't know why you are seeing that when I cannot see that being displayed in the Linux terminal.

Zoneedit did not provide this IP address to us: 69.72.142.98 either. I don't know where you got this.

If I will remove host.whitehorse12.com, then that defeats the purpose of all what I have been doing. What I am trying to do here is to make host.whitehorse12.com work as an authoritative nameserver. Zoneedit nameservers will serve as back ups.

If this is the case, then I will remove zoneedit's NS from the Bind system and see what's gonna happen. I hope I am doing the right thing.
Please let me know.

**fedora999** · 10-22-2008, 02:58 AM

When I did the curl command using our IP address, how come I get this result?

# curl 75.150.57.170
<html>
<head>
<title>whitehorse12.com</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="style.css" rel="stylesheet" type="text/css">
</head>

<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<br>
<div align="left"></div>
<table width="524" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td><img src="images/tp_bar.gif" width="646" height="48"></td>
</tr>
<tr>
<td><img src="images/mdl_promo.gif" width="646" height="136"></td>
</tr>
<tr>
<td background="images/bt_bar.gif" height="20">
<div align="right"><img src="images/spacer.gif" width="25" height="1"><font face="Arial, Helvetica, sans-serif" size="2"><a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"> <a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"><a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"> <a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"> <a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"> <a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="20" height="1"> <a href="#"><font color="#CCCCCC">link
1</font></a><img src="images/spacer.gif" width="10" height="1"> </font></div>
</td>
</tr>
<tr>
<td background="images/Untitled-4 copy.gif">
<table width="100%" border="0" cellpadding="0" cellspacing="0" background="images/cnt_bg.gif">
<tr>
<td width="78" valign="top"><br>
<font color="#CCCCCC" face="Arial, Helvetica, sans-serif" size="2"><img src="images/spacer.gif" width="5" height="1">1)
Links 2<br>
<img src="images/spacer.gif" width="5" height="1">1) Links 2<br>
<img src="images/spacer.gif" width="5" height="1">1) Links 2<br>
<img src="images/spacer.gif" width="5" height="1">1) Links 2<br>
<img src="images/spacer.gif" width="5" height="1">1) Links 2 </font></td>
<td width="569" valign="top"><br>
<table width="95%" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td><font face="Arial, Helvetica, sans-serif" size="2">More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More ContentMore Content
More Content More Content More Content More Content More Content.<br>
<br>
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content .<br>
<br>
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
More Content<a href="#"> </a>More Content<a href="#"> </a>More
Content More Content More Content More Content More Content
More Content More Content More Content More Content More Content
.</font></td>
</tr>
</table>
<br>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td background="images/bt_bar.gif"> </td>
</tr>
</table>
</body>
</html>

Also, when I looked at the named system, I saw the note says "query logging is off" Is that the reason why DNS on port 53 is not accessible with my NS for host.whitehorse12.com?

I hope you can further explain.

Thanks for your patience.

**starfish** · 10-22-2008, 03:42 AM

There seems to be no DNS entry for your DNS server host.whitehorse12.com. Normally with domain registrars you can set the NS server name and IP address. This is external to BIND. You'll have to set this up with PrivacyProtect.org, or whoever is your domain registrar.

Code:

 
# host host.whitehorse12.com
Host host.whitehorse12.com not found: 3(NXDOMAIN)
#

Using nmap it appears that there is a server allowing access to port 53. So BIND appears to be running.

Code:

 
# nmap -sU -p53 75.150.57.170        
Starting Nmap 4.53 ( http://insecure.org ) at 2008-10-21 20:24 PDT
Interesting ports on 75-150-57-170-Richmond.hfc.comcastbusiness.net (75.150.57.170):
PORT   STATE    SERVICE
53/udp filtered domain
Nmap done: 1 IP address (1 host up) scanned in 0.276 seconds
#

The problem is that the BIND server isn't responding to queries about whitehorse12.com from the Internet.

Code:

 
# host whitehorse12.com 75.150.57.170
 
<nothing>

Once you get host.whitehorse12.com set up as a domain server in the registrar with the correct IP address, (which should add it to the dig list below) and you get host.whitehorse12.com to answer with the correct IP address for whitehorse12.com from the Internet you should be OK.

Code:

 
# dig whitehorse12.com ns
 
whitehorse12.com.       6818    IN      NS      ns15.zoneedit.com.
whitehorse12.com.       6818    IN      NS      ns13.zoneedit.com.

At the moment the zone edit servers have the wrong IP address for whitehorse12.com. If your primary DNS server goes off line, the backups won't help you with this incorrect information.

Code:

 
# host whitehorse12.com              
whitehorse12.com has address 0.0.0.0
#

The curl output shows the actual HTML code in the web page, it's a good command line utility to know about. My browser shows the site OK too.

**fedora999** · 10-22-2008, 11:18 PM

Okay, when I typed this command:
# host whitehorse12.com
I got a different response. This is what I got:
whitehorse12.com has address 75.150.57.170

For this command:
# host whitehorse12.com 75.150.57.170

I got a reply too. Was it just my system? I am confused. I can access the website by typing the www.whitehorse12.com or whitehorse12.com or the IP address.

I will be using a different FQDN to register the nameserver. The whitehorse12.com is the one that I am playing around if I can make it work.