Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Dns cutting out

Status
Not open for further replies.

streek

Programmer
Mar 9, 2005
5
US
Hello I need some help.

I am having a problem with bind 9.3.0. At first I though it was a one time thing with one of my users. The problem i'm having is that the webhost is running no problems and so is bind but it's acting like the DNS is non-existant every few minutes. Making navagating my page a pain in the arse. I was wondering if anyone had information on how/why my bind could me running, showing no errors, and still losing connections with others. (If I use the IP address the webpage is 100% fine so I KNOW it's the DNS/Bind.)

This problem has been going on for almost 2 weeks now and im in a critial stage now. I realy need some assistance I have tried everything I know of.
 
When it's not working, query the server for the domain and then have a look in the logs to see if named actually see's the request and answers. Is the service running when it stops working? Can you query the server for other domains okay or is it just this one?

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************
 
Right now yes it looks like it's taking the querie. I'm not sure about when it's not working since it's SO speratic. Yes the service is always running even when it's not working. All the domains I host seem to have similar problems (except one which no longer has a nameserver because of this problem - was a client)
 
Examine the logs when it stops working and post back with the results. It might just be that the named process is crashing out. Sounds like more of a problem with the box than a DNS issue.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************
 
HEres the activity log for it:

9-Mar-2005 7:40:46.031 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 7:40:46.031 general: info: zone mesaro.com/IN: loaded serial 2004041700
09-Mar-2005 7:40:46.046 general: info: running
09-Mar-2005 8:44:22.453 general: info: shutting down: flushing changes
09-Mar-2005 8:44:22.453 general: notice: stopping command channel on 127.0.0.1#953
09-Mar-2005 8:44:25.781 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 8:44:25.781 general: info: zone mesaro.com/IN: loaded serial 2004041700
09-Mar-2005 8:44:25.812 general: info: running
09-Mar-2005 17:13:35.671 xfer-out: info: client 216.117.186.93#55186: transfer of 'mesaro.com/IN': AXFR started
09-Mar-2005 17:13:35.671 xfer-out: info: client 216.117.186.93#55186: transfer of 'mesaro.com/IN': AXFR ended
09-Mar-2005 17:16:51.281 xfer-out: info: client 216.117.186.93#55210: transfer of 'mesaro.com/IN': AXFR started
09-Mar-2005 17:16:51.281 xfer-out: info: client 216.117.186.93#55210: transfer of 'mesaro.com/IN': AXFR ended
09-Mar-2005 17:26:07.296 xfer-out: info: client 216.117.186.93#55284: transfer of 'mesaro.com/IN': AXFR started
09-Mar-2005 17:26:07.296 xfer-out: info: client 216.117.186.93#55284: transfer of 'mesaro.com/IN': AXFR ended
09-Mar-2005 18:49:55.843 general: info: shutting down: flushing changes
09-Mar-2005 18:49:55.843 general: notice: stopping command channel on 127.0.0.1#953
09-Mar-2005 18:49:57.812 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 18:49:57.812 general: info: zone mesaro.com/IN: loaded serial 2004041700
09-Mar-2005 18:49:57.875 general: info: running
09-Mar-2005 19:39:15.765 general: info: shutting down: flushing changes
09-Mar-2005 19:39:15.765 general: notice: stopping command channel on 127.0.0.1#953
09-Mar-2005 19:39:17.453 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 19:39:17.468 general: info: zone mesaro.com/IN: loaded serial 2004041700
09-Mar-2005 19:39:17.531 general: info: running
09-Mar-2005 22:07:47.640 general: info: shutting down: flushing changes
09-Mar-2005 22:07:47.640 general: notice: stopping command channel on 127.0.0.1#953
09-Mar-2005 22:07:49.468 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 22:07:49.468 general: info: zone mesaro.com/IN: loaded serial 2004041700
09-Mar-2005 22:07:49.531 general: info: running
09-Mar-2005 22:09:24.796 general: info: shutting down: flushing changes
09-Mar-2005 22:09:24.796 general: notice: stopping command channel on 127.0.0.1#953
09-Mar-2005 22:09:26.437 general: info: zone 218.98.68.in-addr.arpa/IN: loaded serial 2004041700
09-Mar-2005 22:09:26.437 general: info: zone mesaro.com/IN: loaded serial 200041700
09-Mar-2005 22:09:26.515 general: info: running

and here's the recent (as of the last cutout) quere logs.


10-Mar-2005 3:16:09.652 client 68.98.218.104#3271: query: ANY A -
10-Mar-2005 3:16:29.935 client 165.21.100.89#49610: query: mesaro.com IN A -
10-Mar-2005 3:16:30.028 client 165.21.100.89#49610: query: mesaro.com IN A -
10-Mar-2005 3:16:30.935 client 165.21.83.89#61467: query: mesaro.com IN A -
10-Mar-2005 3:16:31.419 client 165.21.83.89#61467: query: mesaro.com IN A -
10-Mar-2005 3:16:39.654 client 68.98.218.104#3272: query: ANY A -
10-Mar-2005 3:16:39.670 client 68.98.218.104#3273: query: ANY A -
10-Mar-2005 3:16:59.734 client 68.2.16.26#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:00.750 client 68.1.208.29#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:02.734 client 68.1.208.29#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:03.734 client 68.2.16.26#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:04.750 client 68.1.208.29#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:07.188 client 68.1.208.29#5353: query: IN A6 -E
10-Mar-2005 3:17:07.735 client 68.2.16.26#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:08.125 client 68.2.16.26#5353: query: IN A6 -E
10-Mar-2005 3:17:09.204 client 68.1.208.29#5353: query: IN A6 -E
10-Mar-2005 3:17:09.688 client 68.98.218.104#3275: query: ANY A -
10-Mar-2005 3:17:09.704 client 68.98.218.104#3276: query: ANY A -
10-Mar-2005 3:17:11.204 client 68.1.208.29#5353: query: IN A6 -E
10-Mar-2005 3:17:12.235 client 68.2.16.26#5353: query: IN A6 -E
10-Mar-2005 3:17:12.751 client 68.1.208.29#5353: query: mail.mesaro.com IN A -
10-Mar-2005 3:17:15.735 client 68.2.16.26#5353: query: mail.mesaro.com IN A -
10-Mar-2005 3:17:16.126 client 68.2.16.26#5353: query: IN A6 -E
10-Mar-2005 3:17:19.157 client 68.98.218.104#3277: query: ANY A -
10-Mar-2005 3:17:19.173 client 68.98.218.104#3278: query: ANY A -
10-Mar-2005 3:17:19.220 client 68.1.208.29#5353: query: IN A6 -
10-Mar-2005 3:17:19.423 client 68.98.218.104#3279: query: ANY A -
10-Mar-2005 3:17:19.439 client 68.98.218.104#3280: query: ANY A -
10-Mar-2005 3:17:19.642 client 68.98.218.104#3281: query: ANY A -
10-Mar-2005 3:17:19.658 client 68.98.218.104#3282: query: ANY A -
10-Mar-2005 3:17:19.845 client 68.98.218.104#3283: query: ANY A -
10-Mar-2005 3:17:19.861 client 68.98.218.104#3284: query: ANY A -
10-Mar-2005 3:17:20.048 client 68.98.218.104#3285: query: ANY A -
10-Mar-2005 3:17:20.064 client 68.98.218.104#3286: query: ANY A -
10-Mar-2005 3:17:20.189 client 68.98.218.104#3287: query: ANY A -
10-Mar-2005 3:17:20.204 client 68.98.218.104#3288: query: ANY A -
10-Mar-2005 3:17:20.392 client 68.98.218.104#3289: query: ANY A -
10-Mar-2005 3:17:20.408 client 68.98.218.104#3290: query: ANY A -
10-Mar-2005 3:17:20.564 client 68.98.218.104#3291: query: ANY A -
10-Mar-2005 3:17:20.579 client 68.98.218.104#3292: query: ANY A -
10-Mar-2005 3:17:20.736 client 68.98.218.104#3293: query: ANY A -
10-Mar-2005 3:17:20.751 client 68.98.218.104#3294: query: ANY A -
10-Mar-2005 3:17:20.892 client 68.98.218.104#3295: query: ANY A -
10-Mar-2005 3:17:20.908 client 68.98.218.104#3296: query: ANY A -
10-Mar-2005 3:17:21.048 client 68.98.218.104#3297: query: ANY A -
10-Mar-2005 3:17:21.064 client 68.98.218.104#3298: query: ANY A -
10-Mar-2005 3:17:24.158 client 68.2.16.26#5353: query: IN A6 -
10-Mar-2005 3:17:24.158 client 68.2.16.26#5353: query: IN AAAA -E
10-Mar-2005 3:17:28.768 client 68.1.208.29#5353: query: mail.mesaro.com IN A -
10-Mar-2005 3:17:30.127 client 68.1.208.26#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:32.752 client 68.1.208.29#5353: query: IN AAAA -E
10-Mar-2005 3:17:33.393 client 68.2.16.24#5353: query: mail.mesaro.com IN A -E
10-Mar-2005 3:17:38.550 client 209.244.7.54#35333: query: IN A -E
10-Mar-2005 3:17:42.597 client 209.244.6.135#32770: query: IN A -E
10-Mar-2005 3:17:45.550 client 209.244.7.54#35333: query: IN A -E
10-Mar-2005 3:17:46.785 client 209.244.7.55#64523: query: IN A6 -E
10-Mar-2005 3:17:46.785 client 209.244.7.55#64523: query: IN A -E
10-Mar-2005 3:17:49.629 client 209.244.7.54#35333: query: IN A6 -E
10-Mar-2005 3:17:50.613 client 209.244.6.135#32770: query: IN A -E
10-Mar-2005 3:17:51.066 client 68.98.218.104#3318: query: ANY A -
10-Mar-2005 3:17:51.207 client 68.98.218.104#3319: query: ANY A -
10-Mar-2005 3:17:52.566 client 209.244.7.54#35333: query: IN A -E
10-Mar-2005 3:17:54.785 client 209.244.7.55#64523: query: IN A -E
10-Mar-2005 3:17:54.785 client 209.244.7.55#64523: query: IN A6 -E
10-Mar-2005 3:17:54.895 client 209.244.6.135#32770: query: IN A6 -E
10-Mar-2005 3:17:56.239 client 68.98.218.104#3335: query: ANY A -
10-Mar-2005 3:17:56.254 client 68.98.218.104#3336: query: ANY A -
10-Mar-2005 3:17:56.629 client 209.244.7.54#35333: query: IN A6 -E
10-Mar-2005 3:17:58.614 client 209.244.6.135#32770: query: IN A -E
10-Mar-2005 3:18:00.567 client 209.244.7.54#35333: query: IN A -
10-Mar-2005 3:18:01.270 client 68.98.218.104#3337: query: ANY A -
10-Mar-2005 3:18:01.286 client 68.98.218.104#3338: query: ANY A -
10-Mar-2005 3:18:02.786 client 209.244.7.55#64523: query: IN A6 -E
10-Mar-2005 3:18:02.786 client 209.244.7.55#64523: query: IN A -E
10-Mar-2005 3:18:02.895 client 209.244.6.135#32770: query: IN A6 -E
10-Mar-2005 3:18:04.646 client 209.244.7.54#35333: query: IN A6 -E
10-Mar-2005 3:18:06.302 client 68.98.218.104#3343: query: ANY A -
10-Mar-2005 3:18:06.318 client 68.98.218.104#3344: query: ANY A -
10-Mar-2005 3:18:06.615 client 209.244.6.135#32770: query: IN A -
10-Mar-2005 3:18:08.208 client 68.98.218.104#3345: query: ANY A -
10-Mar-2005 3:18:08.224 client 68.98.218.104#3346: query: ANY A -
10-Mar-2005 3:18:08.396 client 68.98.218.104#3347: query: ANY A -
10-Mar-2005 3:18:08.412 client 68.98.218.104#3348: query: ANY A -
10-Mar-2005 3:18:08.599 client 68.98.218.104#3349: query: ANY A -
10-Mar-2005 3:18:08.615 client 68.98.218.104#3350: query: ANY A -
10-Mar-2005 3:18:08.787 client 68.98.218.104#3351: query: ANY A -
10-Mar-2005 3:18:08.802 client 68.98.218.104#3352: query: ANY A -
10-Mar-2005 3:18:08.958 client 68.98.218.104#3353: query: ANY A -
10-Mar-2005 3:18:08.974 client 68.98.218.104#3354: query: ANY A -
10-Mar-2005 3:18:09.146 client 68.98.218.104#3355: query: ANY A -
10-Mar-2005 3:18:09.162 client 68.98.218.104#3356: query: ANY A -
10-Mar-2005 3:18:09.318 client 68.98.218.104#3357: query: ANY A -
10-Mar-2005 3:18:09.521 client 68.98.218.104#3358: query: ANY A -
10-Mar-2005 3:18:10.802 client 209.244.7.55#64523: query: IN A6 -
10-Mar-2005 3:18:10.912 client 209.244.6.135#32770: query: IN A6 -E
10-Mar-2005 3:18:11.365 client 165.21.100.89#49610: query: mesaro.com IN A -
10-Mar-2005 3:18:11.459 client 165.21.100.89#49610: query: mesaro.com IN A -
10-Mar-2005 3:18:12.365 client 165.21.83.89#61467: query: mesaro.com IN A -
10-Mar-2005 3:18:12.459 client 165.21.83.89#61467: query: mesaro.com IN A -
10-Mar-2005 3:18:12.568 client 209.244.7.55#64523: query: IN AAAA -E
10-Mar-2005 3:18:12.646 client 209.244.7.54#35333: query: IN A6 -
10-Mar-2005 3:18:14.521 client 68.98.218.104#3359: query: ANY A -
10-Mar-2005 3:18:14.537 client 68.98.218.104#3360: query: ANY A -
10-Mar-2005 3:18:15.553 client 209.244.7.54#35333: query: IN AAAA -E
10-Mar-2005 3:18:16.381 client 165.21.100.89#49610: query: IN A -
10-Mar-2005 3:18:17.569 client 165.21.100.89#49610: query: IN A -
10-Mar-2005 3:18:18.912 client 209.244.6.135#32770: query: IN A6 -
10-Mar-2005 3:18:19.553 client 68.98.218.104#3361: query: ANY A -
10-Mar-2005 3:18:19.569 client 68.98.218.104#3362: query: ANY A -
10-Mar-2005 3:18:20.616 client 209.244.6.135#32770: query: IN AAAA -E
10-Mar-2005 3:18:21.585 client 209.244.7.55#64523: query: IN AAAA -E
10-Mar-2005 3:18:24.554 client 209.244.7.54#35333: query: IN AAAA -E
10-Mar-2005 3:18:24.569 client 68.98.218.104#3363: query: ANY A -
10-Mar-2005 3:18:24.585 client 68.98.218.104#3364: query: ANY A -
10-Mar-2005 3:18:29.585 client 68.98.218.104#3365: query: ANY A -
10-Mar-2005 3:18:29.601 client 68.98.218.104#3366: query: ANY A -
10-Mar-2005 3:18:29.616 client 209.244.6.135#32770: query: IN AAAA -E
10-Mar-2005 3:18:30.585 client 209.244.7.55#64523: query: IN AAAA -E
10-Mar-2005 3:18:33.554 client 209.244.7.54#35333: query: IN AAAA -E
10-Mar-2005 3:18:34.601 client 68.98.218.104#3367: query: ANY A -
10-Mar-2005 3:18:34.617 client 68.98.218.104#3368: query: ANY A -
10-Mar-2005 3:18:38.633 client 209.244.6.135#32770: query: IN AAAA -E
10-Mar-2005 3:18:39.586 client 209.244.7.55#64523: query: IN AAAA -
10-Mar-2005 3:18:39.633 client 68.98.218.104#3369: query: ANY A -
10-Mar-2005 3:18:39.649 client 68.98.218.104#3370: query: ANY A -
10-Mar-2005 3:18:42.571 client 209.244.7.54#35333: query: IN AAAA -
10-Mar-2005 3:18:44.649 client 68.98.218.104#3371: query: ANY A -
10-Mar-2005 3:18:44.665 client 68.98.218.104#3372: query: ANY A -
10-Mar-2005 3:18:48.634 client 209.244.6.135#32770: query: IN AAAA -
10-Mar-2005 3:18:49.681 client 68.98.218.104#3373: query: ANY A -
10-Mar-2005 3:18:49.696 client 68.98.218.104#3374: query: ANY A -
10-Mar-2005 3:18:54.697 client 68.98.218.104#3375: query: ANY A -
10-Mar-2005 3:18:54.712 client 68.98.218.104#3376: query: ANY A -
10-Mar-2005 3:18:59.713 client 68.98.218.104#3377: query: ANY A -
10-Mar-2005 3:18:59.728 client 68.98.218.104#3378: query: ANY A -
10-Mar-2005 3:19:04.807 client 68.98.218.104#3379: query: ANY A -
10-Mar-2005 3:19:04.822 client 68.98.218.104#3380: query: ANY A -
10-Mar-2005 3:19:09.870 client 68.98.218.104#3381: query: ANY A -
10-Mar-2005 3:19:09.917 client 68.98.218.104#3382: query: ANY A -
10-Mar-2005 3:19:14.933 client 68.98.218.104#3383: query: ANY A -
10-Mar-2005 3:19:14.980 client 68.98.218.104#3384: query: ANY A -
10-Mar-2005 3:19:19.996 client 68.98.218.104#3385: query: ANY A -
10-Mar-2005 3:19:20.011 client 68.98.218.104#3386: query: ANY A -
10-Mar-2005 3:19:25.012 client 68.98.218.104#3387: query: ANY A -
10-Mar-2005 3:19:25.027 client 68.98.218.104#3388: query: ANY A -
10-Mar-2005 3:19:30.028 client 68.98.218.104#3390: query: ANY A -
10-Mar-2005 3:19:30.043 client 68.98.218.104#3391: query: ANY A -
10-Mar-2005 3:19:35.059 client 68.98.218.104#3392: query: ANY A -
10-Mar-2005 3:19:35.075 client 68.98.218.104#3393: query: ANY A -
10-Mar-2005 3:19:40.075 client 68.98.218.104#3394: query: ANY A -
10-Mar-2005 3:19:40.091 client 68.98.218.104#3395: query: ANY A -
10-Mar-2005 3:19:45.091 client 68.98.218.104#3396: query: ANY A -
10-Mar-2005 3:19:45.107 client 68.98.218.104#3397: query: ANY A -
10-Mar-2005 3:19:50.123 client 68.98.218.104#3398: query: ANY A -
10-Mar-2005 3:19:50.139 client 68.98.218.104#3399: query: ANY A -
10-Mar-2005 3:19:55.139 client 68.98.218.104#3400: query: ANY A -
10-Mar-2005 3:19:55.155 client 68.98.218.104#3401: query: ANY A -
10-Mar-2005 3:20:00.171 client 68.98.218.104#3402: query: ANY A -
10-Mar-2005 3:20:00.186 client 68.98.218.104#3403: query: ANY A -
10-Mar-2005 3:20:05.187 client 68.98.218.104#3404: query: ANY A -
10-Mar-2005 3:20:05.203 client 68.98.218.104#3405: query: ANY A -
10-Mar-2005 3:20:10.203 client 68.98.218.104#3406: query: ANY A -
10-Mar-2005 3:20:10.219 client 68.98.218.104#3407: query: ANY A -
10-Mar-2005 3:20:15.219 client 68.98.218.104#3408: query: ANY A -
10-Mar-2005 3:20:15.235 client 68.98.218.104#3409: query: ANY A -
10-Mar-2005 3:20:20.235 client 68.98.218.104#3410: query: ANY A -
10-Mar-2005 3:20:20.251 client 68.98.218.104#3411: query: ANY A -


One question how could it be a box issue?
 
If you query the DNS server internally, does this problem still occur. I've queried it a fe times and sometimes it does time out.

[chris@uranium chris]$ dig @68.98.218.110

; <<>> DiG 9.2.1 <<>> @68.98.218.110
;; global options: printcmd
;; connection timed out; no servers could be reached

But sometimes I get an answer.

[chris@uranium chris]$ dig @68.98.218.110

; <<>> DiG 9.2.1 <<>> @68.98.218.110
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29816
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
; IN A

;; ANSWER SECTION:
60 IN A 68.98.218.110

;; AUTHORITY SECTION:
mesaro.com. 60 IN NS
;; Query time: 166 msec
;; SERVER: 68.98.218.110#53(68.98.218.110)
;; WHEN: Thu Mar 10 11:07:55 2005
;; MSG SIZE rcvd: 62

The question is, is it the box, named or the connection to the DNS server? If you query the box internally, does the same thing happen? Is anything else on that box having problems?

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************
 
Well Chris On computers on my network (i.e mine and the 3 zeons) have NO problem but outside the intranet it gets all timeoutish just like you saw. The box is in MINT condition it's a zeon architechture and I had formated it's harddrives a few weeks ago. At the time due to a virus my brother (who personaly filled for me) let on the system. Problem is even since we reformated put a harddrive (we needed more space and used the downtime). Since then it's been doing this. I'm beginning to lose costomers and my backbone costomer said they will pull out unless I fix it THIS WEEK.

So in summary of my randomness.
1. The Box is fine for sure. (firewalls are all working properly and ARE forwarding the right ports)
2. Named said it's running and never has any REAL ERRORs in the logs (any of the logs i've reviewed).
3. I would guess it could be the DNS server I placed a support ticket to my registrar with the same form of information i've supplyed you with in the hopes tomorrow they'll hit me back with some information.
 
For this reason you really do need a backup DNS server. You should always have at least TWO DNS servers but you only have a single server and no secondary.

If it only happens from external queries then it may be to do with your connection or intermittent problems with the firewall.

I would advise you to source a external DNS service that would slave off your server so that even if you are having issues, queries can still be sent to the secondary server and your customers do not loose service.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************
 
I will do that. I still need to get this working at least abit more then I have right now.

So do you have any advice about how I should go about TRYING to fix this problem?
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top