Re: Recursive DNS w/ GCI

From: Beau V.C. Bellamy <beau@borealisbroadband.net>
Date: Tue Oct 26 2004 - 21:14:36 AKDT

Try checking your hint file. On my system, it's "named.ca". This file is
used to prime your DNS server for querying the root DNS servers directly.
Try removing the default root servers and replace them with the ones from GCI
and ACS.

- Beau

On Tuesday 26 October 2004 19:58, Scott Johnson wrote:
> I thought that may be the case, however if I configure any local hosts
> on my network to use either ACS or GCI directly (and not my local BIND
> cache), everything works fine. ACS does not appear to limit DNS to
> their own customers. As far as I can tell, it's either the BIND
> server itself (however queries to which the server is authoritive work
> fine) or something about the RCA modem from GCI.
>
>
> On Tue, 26 Oct 2004 12:29:50 -0800, Beau V.C. Bellamy
>
> <beau@borealisbroadband.net> wrote:
> > Hello Scott,
> >
> > Your problem may be with you forwarding your DNS requests to DNS servers
> > not on the GCI network. Namely the ACS one in this case. A lot of ISPs
> > turn off recursion , forwarding, and glue-fetching for requests that
> > don't originate on thier networks. This is usually done in the process
> > of securing a DNS server from poisoning attacks and to reduce load.
> >
> > Hope that helps.
> >
> > - Beau
> >
> > On Monday 25 October 2004 01:03, Scott Johnson wrote:
> > > Is anyone running their own recursive/caching DNS server on a GCI
> > > cable modem? I do and everything was working fine until I switched
> > > over to the new DOCSIS platform a few weeks ago (from the COM21
> > > system). My DNS server is BIND 9.2.1 on a RH 9.0 box.... everything
> > > was working fine until the modem swap out. Now, I can NOT get BIND to
> > > communicate with any DNS server past the RCA modem. If I configure a
> > > non-BIND DNS server on my intranet, it gets a successful reply back
> > > about 50% of the time. I forward recursive DNS requests to both GCI &
> > > ACS' servers, but I don't notice any different between the two - still
> > > about 50% of my requests go unanswered.
> > >
> > > Ideas on where to start troubleshooting this?
> >
> > ---------
> > To unsubscribe, send email to <aklug-request@aklug.org>
> > with 'unsubscribe' in the message body.
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Tue Oct 26 21:13:50 2004

This archive was generated by hypermail 2.1.8 : Tue Oct 26 2004 - 21:13:50 AKDT