Ken Teague on 05/02/10 23:42, wrote:

On Sun, Jan 31, 2010 at 4:27 AM, Adam Hardy <adam.ant@cyberspaceroad.com> wrote:

and finally my resolv.conf (rewritten by dhcp.client when picking up IP
address from the DSL modem):

adam@isengard:~$ cat /etc/resolv.conf
domain localdomain
search localdomain
nameserver 127.0.0.1
nameserver 194.74.65.68


Your resolv.conf is pointing to 127.0.0.1 for your primary nameserver.
Are you running DNS services on your local host?



adam@isengard:~$ host www.trade2win.com
Host www.trade2win.com not found: 3(NXDOMAIN)


Here, you're querying your primary nameserver for the IP address of
www.trade2win.com. It's failing to resolve it.



And then with another nameserver:




adam@isengard:~$ host www.trade2win.com 4.2.2.1
Using domain server:
Name: 4.2.2.1
Address: 4.2.2.1#53
Aliases:



www.trade2win.com is an alias for panna-229.trade2win.com.
panna-229.trade2win.com has address 208.43.120.229
Host panna-229.trade2win.com not found: 3(NXDOMAIN)
Host panna-229.trade2win.com not found: 3(NXDOMAIN)


Now you're telling host to ask 4.2.2.1 to resolve www.trade2win.com
and it succeeds.

I'd recommend you check your local host to see if it's running DNS
services. If it is, you'd need to find out why it's failing to
resolve this host.


It is running dnsmasq. It's a gateway and firewall with two NICs, one for the
net and one for the LAN.


I don't know why the first lookup is failing with the default nameserver from my
ISP - but it only fails intermittently.


I have a small hunch that it might be to do with my setup because the external
NIC gets its ip address via DHCP from the ISP and refreshes every 30 seconds or
so. I just don't know what to check for next. There is no other website I have
this problem with.



--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Fri, Feb 5, 2010 at 5:16 PM, Adam Hardy <adam.ant@cyberspaceroad.com> wrote:
> It is running dnsmasq. It's a gateway and firewall with two NICs, one for
> the net and one for the LAN.

My assistance at this point will be rather limited, as I've never used
dnsmasq and I don't have a means to set it up and test it now.


> I don't know why the first lookup is failing with the default nameserver
> from my ISP - but it only fails intermittently.

Being that it fails intermittently and it seems to fail while querying
your own name server, I have a feeling the problem is with dnsmasq.


> I have a small hunch that it might be to do with my setup because the
> external NIC gets its ip address via DHCP from the ISP and refreshes every
> 30 seconds or so. I just don't know what to check for next. There is no
> other website I have this problem with.

Rather than using "host", try using nslookup, but don't use it in the
same way you're using host. Instead, type nslookup by itself to enter
its command shell. From there, when you perform a lookup, it will
tell you which server it's querying to obtain the answer.

itsme@mybox:~$ nslookup
> www.trade2win.com
Server: 10.10.2.25
Address: 10.10.2.25#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com

In my example, my box is querying my internal DNS server on 10.10.2.25
to obtain the answer. Run the same query against your local host
multiple times to see how persistent the problem is. Once you've done
that, switch to query against a separate server and run the query
against it multiple times.

> server 4.2.2.1
Default server: 4.2.2.1
Address: 4.2.2.1#53
> www.trade2win.com
Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229
> www.trade2win.com
Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229
> www.trade2win.com
Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229


Note that I'm querying for www.trade2win.com here and we're getting
non-authoritative answers. To get an authoritative answers, we need
to query for the domain name followed by a period. Not only that, but
we need to set our query type to any.

> set type=any
> trade2win.com.
Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
trade2win.com text = "v=spf1 mx ip4:64.78.0.0/18 include:sfarm1.com
include:aspmx.googlemail.com ~all"
trade2win.com
origin = dns1.registrar-servers.com
mail addr = hostmaster.registrar-servers.com
serial = 2008080808
refresh = 10001
retry = 1801
expire = 604801
minimum = 3601
trade2win.com mail exchanger = 30 ALT2.ASPMX.L.GOOGLE.com.
trade2win.com mail exchanger = 40 ASPMX2.GOOGLEMAIL.com.
trade2win.com mail exchanger = 50 ASPMX3.GOOGLEMAIL.com.
trade2win.com mail exchanger = 60 ASPMX4.GOOGLEMAIL.com.
trade2win.com mail exchanger = 70 ASPMX5.GOOGLEMAIL.com.
trade2win.com mail exchanger = 10 ASPMX.L.GOOGLE.com.
trade2win.com mail exchanger = 20 ALT1.ASPMX.L.GOOGLE.com.
Name: trade2win.com
Address: 208.43.120.229
trade2win.com nameserver = dns1.registrar-servers.com.
trade2win.com nameserver = dns3.registrar-servers.com.
trade2win.com nameserver = dns2.registrar-servers.com.

Authoritative answers can be found from:
>

What the heck? We're returned to the nslookup prompt without it
telling us where we can obtain authoritative answers. What's up with
that?? Let me try my own internal DNS server.

> server 10.10.2.25
Default server: 10.10.2.25
Address: 10.10.2.25#53
> trade2win.com.
Server: 10.10.2.25
Address: 10.10.2.25#53

Non-authoritative answer:
Name: trade2win.com
Address: 208.43.120.229
trade2win.com nameserver = dns3.registrar-servers.com.
trade2win.com nameserver = dns1.registrar-servers.com.
trade2win.com
origin = dns1.registrar-servers.com
mail addr = hostmaster.registrar-servers.com
serial = 2008080808
refresh = 10001
retry = 1801
expire = 604801
minimum = 3601
trade2win.com mail exchanger = 50 aspmx3.googlemail.com.
trade2win.com text = "v=spf1 mx ip4:64.78.0.0/18 include:sfarm1.com
include:aspmx.googlemail.com ~all"

Authoritative answers can be found from:
dns3.registrar-servers.com internet address = 72.34.41.47
dns1.registrar-servers.com internet address = 74.81.64.51


That's more like it. Now, for grins and giggles, lets try querying
against the authoritative servers a few times.

> server 72.34.41.47
Default server: 72.34.41.47
Address: 72.34.41.47#53
> www.trade2win.com.
Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229
> www.trade2win.com
Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229
> www.trade2win.com
Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229
>

Perfect! No problems, here, so far. Lets just stop here for now to
see if we can narrow down this problem to being with DNS queries
against your local host or whatnot. I have a feeling it is. I'd also
run those test queries more than just a few times, since this problem
is intermittent.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Sat, 06 Feb 2010 12:12:50 +1300, Richard Hector wrote:

> On Fri, 2010-02-05 at 18:56 +0000, Camaleón wrote:
>
>> It looks crystal clear to me: blame your ISP routing tables, any proxy
>> or service that it can be being used by them to filter Internet traffic
>> or just its DNS servers :-)
>
> I'm just an observer of this conversation, but can you clarify your
> reasoning?

Sure :-)

> I'm curious as to the reason the name can be both resolved and not
> found, but I get the same result here, from two machines with completely
> different routing and dns (I think).

You maybe experiencing another issue, different than the OP's.

The OP was available to:

- Browse the site via proxy.
- Perform a dns lookup and getting a success response using another dns
server.
- OTOH, was having no problem while connecting the site with his mobile
phone.

So, that tells me the website is up and running and can be reached by
normal browsing. The problem lays in the OP ISP.

Greetings,

--
Camaleón


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Camaleón wrote:

2010/2/5 Joe:

(you forgot replying to the list)

Sorry. I use Icedove for mail and news, and I've yet to find out how to
make it reply to the list. I need to remember to copy and paste the
right address and I do occasionally forget. I take another debian list
as a newsgroup and there's no problem then.


--
Joe


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Sat,06.Feb.10, 12:08:58, Joe wrote:
> Camaleón wrote:
> >2010/2/5 Joe:
> >
> >(you forgot replying to the list)
> >
> Sorry. I use Icedove for mail and news, and I've yet to find out how
> to make it reply to the list. I need to remember to copy and paste
> the right address and I do occasionally forget. I take another
> debian list as a newsgroup and there's no problem then.

There's a reply-to-list add-on/extension for Icedove.

Regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic

Andrei Popescu wrote:

On Sat,06.Feb.10, 12:08:58, Joe wrote:

Camaleón wrote:

2010/2/5 Joe:

(you forgot replying to the list)


Sorry. I use Icedove for mail and news, and I've yet to find out how
to make it reply to the list. I need to remember to copy and paste
the right address and I do occasionally forget. I take another
debian list as a newsgroup and there's no problem then.


There's a reply-to-list add-on/extension for Icedove.




Thank you. This reply has hopefully got to the right place...

It's taking a bit of effort to find TB/ID add-ons at the moment, as all
roads seem to lead to FF add-ons, and they're pushing TB3. My first
attempt, from within Icedove, crashed the computer badly enough to
freeze the mouse pointer and kill the keyboard.


--
Joe


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Joe put forth on 2/6/2010 6:08 AM:
> Camaleón wrote:
>> 2010/2/5 Joe:
>>
>> (you forgot replying to the list)
>>
> Sorry. I use Icedove for mail and news, and I've yet to find out how to
> make it reply to the list. I need to remember to copy and paste the
> right address and I do occasionally forget. I take another debian list
> as a newsgroup and there's no problem then.

It's in the Message drop down menu, or available in the right-click context menu
when you right-click a list message, in Win32 T-Bird 3.0.x. If you're running
the latest version of IceDove I would think these options exist for you.

Prior to T-Bird 3.0 I used a community plugin for "reply-to-list". The native
function works a bit better IMO. If you don't have the native function, search
for "reply-to-list" in the Thunderbird plugins. I've used both extensively and
they both work well. The native version is faster and less of a kludge.

--
Stan


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Stan Hoeppner wrote:

Joe put forth on 2/6/2010 6:08 AM:

Camaleón wrote:

2010/2/5 Joe:

(you forgot replying to the list)


Sorry. I use Icedove for mail and news, and I've yet to find out how to
make it reply to the list. I need to remember to copy and paste the
right address and I do occasionally forget. I take another debian list
as a newsgroup and there's no problem then.


It's in the Message drop down menu, or available in the right-click context menu
when you right-click a list message, in Win32 T-Bird 3.0.x. If you're running
the latest version of IceDove I would think these options exist for you.

Prior to T-Bird 3.0 I used a community plugin for "reply-to-list". The native
function works a bit better IMO. If you don't have the native function, search
for "reply-to-list" in the Thunderbird plugins. I've used both extensively and
they both work well. The native version is faster and less of a kludge.



I've got the plug-in now, thanks, and Icedove on sid is at 2.0.0.22.

--
Joe


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Ken Teague on 06/02/10 03:41, wrote:

On Fri, Feb 5, 2010 at 5:16 PM, Adam Hardy <adam.ant@cyberspaceroad.com> wrote:

It is running dnsmasq. It's a gateway and firewall with two NICs, one for
the net and one for the LAN.


My assistance at this point will be rather limited, as I've never used
dnsmasq and I don't have a means to set it up and test it now.



I don't know why the first lookup is failing with the default nameserver
from my ISP - but it only fails intermittently.


Being that it fails intermittently and it seems to fail while querying
your own name server, I have a feeling the problem is with dnsmasq.



I have a small hunch that it might be to do with my setup because the
external NIC gets its ip address via DHCP from the ISP and refreshes every
30 seconds or so. I just don't know what to check for next. There is no
other website I have this problem with.


Rather than using "host", try using nslookup, but don't use it in the
same way you're using host. Instead, type nslookup by itself to enter
its command shell. From there, when you perform a lookup, it will
tell you which server it's querying to obtain the answer.

itsme@mybox:~$ nslookup

www.trade2win.com

Server: 10.10.2.25
Address: 10.10.2.25#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com

In my example, my box is querying my internal DNS server on 10.10.2.25
to obtain the answer. Run the same query against your local host
multiple times to see how persistent the problem is. Once you've done
that, switch to query against a separate server and run the query
against it multiple times.


server 4.2.2.1

Default server: 4.2.2.1
Address: 4.2.2.1#53

www.trade2win.com

Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

www.trade2win.com

Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

www.trade2win.com

Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229


Note that I'm querying for www.trade2win.com here and we're getting
non-authoritative answers. To get an authoritative answers, we need
to query for the domain name followed by a period. Not only that, but
we need to set our query type to any.


set type=any
trade2win.com.

Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
trade2win.com text = "v=spf1 mx ip4:64.78.0.0/18 include:sfarm1.com
include:aspmx.googlemail.com ~all"
trade2win.com
origin = dns1.registrar-servers.com
mail addr = hostmaster.registrar-servers.com
serial = 2008080808
refresh = 10001
retry = 1801
expire = 604801
minimum = 3601
trade2win.com mail exchanger = 30 ALT2.ASPMX.L.GOOGLE.com.
trade2win.com mail exchanger = 40 ASPMX2.GOOGLEMAIL.com.
trade2win.com mail exchanger = 50 ASPMX3.GOOGLEMAIL.com.
trade2win.com mail exchanger = 60 ASPMX4.GOOGLEMAIL.com.
trade2win.com mail exchanger = 70 ASPMX5.GOOGLEMAIL.com.
trade2win.com mail exchanger = 10 ASPMX.L.GOOGLE.com.
trade2win.com mail exchanger = 20 ALT1.ASPMX.L.GOOGLE.com.
Name: trade2win.com
Address: 208.43.120.229
trade2win.com nameserver = dns1.registrar-servers.com.
trade2win.com nameserver = dns3.registrar-servers.com.
trade2win.com nameserver = dns2.registrar-servers.com.

Authoritative answers can be found from:

What the heck? We're returned to the nslookup prompt without it
telling us where we can obtain authoritative answers. What's up with
that?? Let me try my own internal DNS server.


server 10.10.2.25

Default server: 10.10.2.25
Address: 10.10.2.25#53

trade2win.com.

Server: 10.10.2.25
Address: 10.10.2.25#53

Non-authoritative answer:
Name: trade2win.com
Address: 208.43.120.229
trade2win.com nameserver = dns3.registrar-servers.com.
trade2win.com nameserver = dns1.registrar-servers.com.
trade2win.com
origin = dns1.registrar-servers.com
mail addr = hostmaster.registrar-servers.com
serial = 2008080808
refresh = 10001
retry = 1801
expire = 604801
minimum = 3601
trade2win.com mail exchanger = 50 aspmx3.googlemail.com.
trade2win.com text = "v=spf1 mx ip4:64.78.0.0/18 include:sfarm1.com
include:aspmx.googlemail.com ~all"

Authoritative answers can be found from:
dns3.registrar-servers.com internet address = 72.34.41.47
dns1.registrar-servers.com internet address = 74.81.64.51


That's more like it. Now, for grins and giggles, lets try querying
against the authoritative servers a few times.


server 72.34.41.47

Default server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com.

Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

www.trade2win.com

Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

www.trade2win.com

Server: 72.34.41.47
Address: 72.34.41.47#53

www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

Perfect! No problems, here, so far. Lets just stop here for now to
see if we can narrow down this problem to being with DNS queries
against your local host or whatnot. I have a feeling it is. I'd also
run those test queries more than just a few times, since this problem
is intermittent.


OK here's my nslookup experiment - here's my resolv.conf which contains 4.2.2.1
because I modified my dhcp3/dhclient.conf to append 4.2.2.1 after the BT
nameserver (this is a gateway machine):


adam@isengard:~$ cat /etc/resolv.conf
domain localdomain
search localdomain
nameserver 127.0.0.1
nameserver 194.74.65.68
nameserver 4.2.2.1


adam@isengard:~$ nslookup www.trade2win.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229

adam@isengard:~$ nslookup www.trade2win.com - 194.74.65.68
Server: 194.74.65.68
Address: 194.74.65.68#53

** server can't find www.trade2win.com: NXDOMAIN

adam@isengard:~$ nslookup www.trade2win.com - 4.2.2.1
Server: 4.2.2.1
Address: 4.2.2.1#53

Non-authoritative answer:
www.trade2win.com canonical name = panna-229.trade2win.com.
Name: panna-229.trade2win.com
Address: 208.43.120.229


Is this incontrovertible evidence that it's not me causing the problem?


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Sun,07.Feb.10, 19:25:41, Adam Hardy wrote:

[big snip]

> OK here's my nslookup experiment - here's my resolv.conf which
> contains 4.2.2.1 because I modified my dhcp3/dhclient.conf to append
> 4.2.2.1 after the BT nameserver (this is a gateway machine):
>
> adam@isengard:~$ cat /etc/resolv.conf
> domain localdomain
> search localdomain
> nameserver 127.0.0.1
> nameserver 194.74.65.68
> nameserver 4.2.2.1
>
>
> adam@isengard:~$ nslookup www.trade2win.com
> Server: 127.0.0.1
> Address: 127.0.0.1#53
>
> Non-authoritative answer:
> www.trade2win.com canonical name = panna-229.trade2win.com.
> Name: panna-229.trade2win.com
> Address: 208.43.120.229
>
> adam@isengard:~$ nslookup www.trade2win.com - 194.74.65.68
> Server: 194.74.65.68
> Address: 194.74.65.68#53
>
> ** server can't find www.trade2win.com: NXDOMAIN

So your ISP's nameserver fails.

> adam@isengard:~$ nslookup www.trade2win.com - 4.2.2.1
> Server: 4.2.2.1
> Address: 4.2.2.1#53
>
> Non-authoritative answer:
> www.trade2win.com canonical name = panna-229.trade2win.com.
> Name: panna-229.trade2win.com
> Address: 208.43.120.229
>
>
> Is this incontrovertible evidence that it's not me causing the problem?

If you can reproduce it then yes, it shows that the ISP's nameserver is
buggy.

Regards,
Andrei
--
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic