Re: curious name resolution problems

Thanks for taking a look.

>Since your log shows the queries arriving, my guess is that something (a
>firewall or packet filter) is blocking the replies from getting back to
>them.

I thought that may be the case, however, have seen no drops in any of my 
firewall logs. Also, I can see the following on the external interface of my 
firewall ( for this test I removed the packet filter on my external choke 
router ). Here is a tcpdump from the external firewall interface:

21:41:01.118741 dns1.32770 > nameless.aaisp.net.uk.domain:  28292+ PTR? 
162.76.2.81.in-addr.arpa. (42) (DF)
21:41:01.121126 dns1.1324 > clueless.aaisp.net.uk.domain:  9661+ PTR? 
29.20.169.217.in-addr.arpa. (44) (DF)
21:41:01.139591 clueless.aaisp.net.uk.domain > dns1.1324:  9661 1/2/0 (136) 
(DF)
21:41:01.141164 dns1.1324 > clueless.aaisp.net.uk.domain:  9662+ PTR? 
20.20.169.217.in-addr.arpa. (44) (DF)
21:41:01.159326 clueless.aaisp.net.uk.domain > dns1.1324:  9662 1/2/0 (136) 
(DF)
21:41:01.924959 nameless.aaisp.net.uk.32768 > dns1.domain:  47304 PTR? 
162.160-167.76.2.81.in-addr.arpa. (50) (DF)
21:41:01.926402 dns1.domain > nameless.aaisp.net.uk.32768:  47304* 1/1/1 
(113) (DF)
21:41:05.964850 nameless.aaisp.net.uk.32768 > dns1.domain:  11826 A6? 
dns1.doublezero.net. (37) (DF)
21:41:05.966350 dns1.domain > nameless.aaisp.net.uk.32768:  11826* 0/1/0 
(77) (DF)
21:41:05.966282 nameless.aaisp.net.uk.32768 > dns1.domain:  19400 A6? 
dns2.doublezero.net. (37) (DF)
21:41:05.967145 dns1.domain > nameless.aaisp.net.uk.32768:  19400* 0/1/0 
(82) (DF)
21:41:06.198036 dns1.32770 > nameless.aaisp.net.uk.domain:  28292+ PTR? 
162.76.2.81.in-addr.arpa. (42) (DF)
21:41:08.225445 nameless.aaisp.net.uk.32768 > dns1.domain:  30509 [1au] PTR? 
162.160-167.76.2.81.in-addr.arpa. (61) (DF)
21:41:08.226971 dns1.domain > nameless.aaisp.net.uk.32768:  30509* 1/1/2 
(124) (DF)
21:41:10.195223 nameless.aaisp.net.uk.32768 > dns1.domain:  47636 A6? 
dns1.doublezero.net. (37) (DF)
21:41:10.196551 dns1.domain > nameless.aaisp.net.uk.32768:  47636* 0/1/0 
(77) (DF)
21:41:10.196634 nameless.aaisp.net.uk.32768 > dns1.domain:  56586 A6? 
dns2.doublezero.net. (37) (DF)
21:41:10.197406 dns1.domain > nameless.aaisp.net.uk.32768:  56586* 0/1/0 
(82) (DF)


>You have these files backwards.  The contents of db.doublezero.net should
>be in db.76.2.81.in-addr.arpa, and vice versa.
>
>However, since there are no warnings about this in your log, and local digs
>work OK, I suspect the problem isn't in the actual files, but just a
>cut-and-paste error in the post.

Well spotted ;) My mistake in putting the post together !

_________________________________________________________________
Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile