Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 06 Jan 2003 12:32:57 +0000
From:      lemon <lemon@aldigital.co.uk>
To:        Peter Pentchev <roam@ringlet.net>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: getnameinfo contacting 'wrong' resolver for lookup
Message-ID:  <3E197779.3040706@aldigital.co.uk>
References:  <3E182B54.4090007@aldigital.co.uk> <20030106101505.GC382@straylight.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
Peter Pentchev wrote:
> On Sun, Jan 05, 2003 at 12:55:48PM +0000, lemon wrote:
> 
>>
>># tcpdump -ni lo0
>>tcpdump: listening on lo0
>>
>>[ 'wrong' listener being contacted ]
>>
>>18:02:38.448117 192.168.1.2.1226 > 192.168.1.2.53:
>>    24805+ PTR? 7.57.192.80.in-addr.arpa. (42)
>>18:02:43.452867 192.168.1.2.1227 > 192.168.1.2.53:
>>    24805+ PTR? 7.57.192.80.in-addr.arpa. (42)
>>18:02:53.462937 192.168.1.2.1228 > 192.168.1.2.53:
>>    24805+ PTR? 7.57.192.80.in-addr.arpa. (42)
>>18:03:13.473076 192.168.1.2.1229 > 192.168.1.2.53:
>>    24805+ PTR? 7.57.192.80.in-addr.arpa. (42)
> 
> 
> Are you sure those connections are from the SSH daemon, and not from the
> dnscache itself?

i believe they're from sshd, yes. i'm not seeing any prior activity from 
the dnscache before the external tinydns is contacted.

> 
> Can you post the full configuration of the tinydns and dnscache
> services, e.g. using Jonathan de Boyne Pollard's tinydns-showctl and
> dnscache-showctl utilities, available from
> http://homepages.tesco.net/~J.deBoynePollard/Softwares/djbdns.html
> Also, it would be very useful to see the full logfiles generated by
> dnscache and tinydns around the time of the unsuccessful lookups, and
> the exact contents of your /etc/resolv.conf file.

sure, inline below. if it borks the mailer, it's also at:
<http://www.lemonia.org/732/dns_info.txt>.

the two log tails were started at the same time, but the activity was 
seen in the tinydns log first, then the dnscache.

> This might turn out to be a trivial misconfiguration problem, or it
> might be a real getnameinfo(3) bug, but it would be much easier to find
> out with more information :)

misconfiguration definately possible, i've been a bit off-kilter so far 
this year:) thanks for you help!

regards, l.

-- 
lemon@aldigital.co.uk   +44 020 8742 0755   www.aldigital.co.uk
system administrivia         c6 h8 o7         www.thebunker.net

$ cat /etc/resolv.conf
search lemonia.org
nameserver 127.0.0.1

$ ./dnscache-showctl /var/dnscache
*************
/var/dnscache
*************

+++ Configuration options:
CACHESIZE:1000000
DATALIMIT:3000000
IP:127.0.0.1
IPSEND:0.0.0.0
ROOT:/var/dnscache/root

+++ Authorised client IP address prefixes:
127.0.0.1

+++ Hardwired content server IP addresses:
198.41.0.4
128.9.0.107
192.33.4.12
128.8.10.90
192.203.230.10
192.5.5.241
192.112.36.4
128.63.2.53
192.36.148.17
198.41.0.10
193.0.14.129
198.32.64.12
202.12.27.33

$ ./tinydns-showctl /var/tinydns
************
/var/tinydns
************

+++ Configuration options:
IP:192.168.1.2
ROOT:/var/tinydns/root

+++ Apices of those parts of the namespace that will be served up:
lemonia.org.
lemonia.org.
lemonia.org.
1.168.192.in-addr.arpa.
1.168.192.in-addr.arpa.

bash-2.05b# tail -f /var/tinydns/log/main/current
@400000003e1962c217d22ec4 d581481b:04ea:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962c71824f244 d581481b:04eb:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962d118be7af4 d581481b:04ec:e4c1 - 000c 7.57.192.80.in-addr.arpa
@400000003e1962e519596b04 d581481b:04ed:e4c1 - 000c 7.57.192.80.in-addr.arpa

bash-2.05b# tail -f /var/dnscache/log/main/current
@400000003e19630d1a1b190c query 39 7f000001:04ee:50b2 12 
7.57.192.80.in-addr.arpa.
@400000003e19630d1a26928c cached ns 192.80.in-addr.arpa. 
ns2.cableinet.co.uk.
@400000003e19630d1a269e44 cached ns 192.80.in-addr.arpa. ns.ripe.net.
@400000003e19630d1a26a614 cached ns 192.80.in-addr.arpa. ns.cableinet.net.
@400000003e19630d1a26a9fc cached ns co.uk. ns1.nic.uk.
@400000003e19630d1a26ade4 cached ns co.uk. ns2.nic.uk.
@400000003e19630d1a26b1cc cached ns co.uk. ns-nom.pipex.net.
@400000003e19630d1a26b5b4 cached ns co.uk. sec-nom.dns.uk.psi.net.
@400000003e19630d1a26b99c cached 1 ns1.nic.uk.
@400000003e19630d1a26bd84 cached 1 ns2.nic.uk.
@400000003e19630d1a2707bc cached 1 ns-nom.pipex.net.
@400000003e19630d1a270ba4 cached 1 sec-nom.dns.uk.psi.net.
@400000003e19630d1a270f8c tx 1 1 ns2.cableinet.co.uk. co.uk. d94fa483 
9e2b804a 9a20695a c342f082
@400000003e19630d1a9f643c rr d94fa483 172800 1 ns.cableinet.co.uk. c1267103
@400000003e19630d1aa1cd6c rr d94fa483 172800 ns cableinet.co.uk. 
ns.cableinet.co.uk.
@400000003e19630d1aa1d154 rr d94fa483 172800 ns cableinet.co.uk. 
ns2.cableinet.net.
@400000003e19630d1aa1d53c rr d94fa483 172800 ns cableinet.co.uk. 
ns3.cableinet.net.
@400000003e19630d1aa1dd0c stats 39 22438 1 0
@400000003e19630d1aa1dd0c cached 1 ns.cableinet.co.uk.
@400000003e19630d1aa1e0f4 cached 1 ns2.cableinet.net.
@400000003e19630d1aa1e4dc cached 1 ns3.cableinet.net.
@400000003e19630d1aa1e8c4 tx 1 1 ns2.cableinet.co.uk. cableinet.co.uk. 
c1267103 c2759855 c2759d04
@400000003e19630d1b4a6594 rr c1267103 28800 1 ns2.cableinet.co.uk. c2759d04
@400000003e19630d1b4cab9c rr c1267103 28800 1 ns2.cableinet.co.uk. c2759d04
@400000003e19630d1b4caf84 rr c1267103 28800 1 ns3.cableinet.co.uk. c2759855
@400000003e19630d1b4cb36c rr c1267103 28800 ns cableinet.co.uk. 
ns.cableinet.net.
@400000003e19630d1b4cb754 rr c1267103 28800 ns cableinet.co.uk. 
ns2.cableinet.co.uk.
@400000003e19630d1b4cbf24 rr c1267103 28800 ns cableinet.co.uk. 
ns3.cableinet.co.uk.
@400000003e19630d1b4cc30c stats 39 22635 1 0
@400000003e19630d1b4cc30c cached 1 ns.ripe.net.
@400000003e19630d1b4cc6f4 cached 1 ns.cableinet.net.
@400000003e19630d1b4d577c tx 0 12 7.57.192.80.in-addr.arpa. 
192.80.in-addr.arpa. c10000c1 c2759d04 c1267103
@400000003e19630d1cb4de8c rr c2759d04 28800 ns 57.192.80.in-addr.arpa. 
ns.cableinet.net.
@400000003e19630d1cba9b4c rr c2759d04 28800 ns 57.192.80.in-addr.arpa. 
ns2.cableinet.co.uk.
@400000003e19630d1cbaa704 rr c2759d04 28800 ptr 
7.57.192.80.in-addr.arpa. pc-80-192-57-7-az.blueyonder.co.uk.
@400000003e19630d1cbaaaec stats 39 22804 1 0
@400000003e19630d1cbbef24 sent 39 90
@400000003e19630d2baa564c query 40 7f000001:04ef:50b3 12 
7.57.192.80.in-addr.arpa.
@400000003e19630d2bc6c3a4 cached 12 7.57.192.80.in-addr.arpa.
@400000003e19630d2bcd0d04 sent 40 90
@400000003e19630d2bcf6e64 query 41 7f000001:04f0:50b4 1 
pc-80-192-57-7-az.blueyonder.co.uk.
@400000003e19630d2bd8b17c cached ns co.uk. ns1.nic.uk.
@400000003e19630d2bdaefb4 cached ns co.uk. ns2.nic.uk.
@400000003e19630d2bdc85f4 cached ns co.uk. ns-nom.pipex.net.
@400000003e19630d2bdf3d44 cached ns co.uk. sec-nom.dns.uk.psi.net.
@400000003e19630d2be11dbc cached 1 ns1.nic.uk.
@400000003e19630d2be2c39c cached 1 ns2.nic.uk.
@400000003e19630d2be46d64 cached 1 ns-nom.pipex.net.
@400000003e19630d2be60f5c cached 1 sec-nom.dns.uk.psi.net.
@400000003e19630d2bfa433c tx 0 1 pc-80-192-57-7-az.blueyonder.co.uk. 
co.uk. 9e2b804a d94fa483 c342f082 9a20695a
@400000003e19630d2cd96c24 rr 9e2b804a 172800 1 ns.blueyonder.co.uk. c3bc3572
@400000003e19630d2cdcf664 rr 9e2b804a 172800 1 ns2.blueyonder.co.uk. 
c3bc3571
@400000003e19630d2cdcfe34 rr 9e2b804a 172800 ns blueyonder.co.uk. 
ns.blueyonder.co.uk.
@400000003e19630d2cdd021c rr 9e2b804a 172800 ns blueyonder.co.uk. 
ns2.blueyonder.co.uk.
@400000003e19630d2cdd09ec rr 9e2b804a 172800 ns blueyonder.co.uk. 
ns3.cableinet.net.
@400000003e19630d2cdd0dd4 stats 41 23001 1 0
@400000003e19630d2cdd11bc cached 1 ns.blueyonder.co.uk.
@400000003e19630d2cdd15a4 cached 1 ns2.blueyonder.co.uk.
@400000003e19630d2cdd198c cached 1 ns3.cableinet.net.
@400000003e19630d2cddaa14 tx 0 1 pc-80-192-57-7-az.blueyonder.co.uk. 
blueyonder.co.uk. c2759855 c3bc3571 c3bc3572
@400000003e19630d2df6ab94 rr c2759855 28800 1 ns.blueyonder.co.uk. c3bc3572
@400000003e19630d2e027334 rr c2759855 28800 1 ns2.blueyonder.co.uk. c3bc3571
@400000003e19630d2e0286bc rr c2759855 28800 1 
pc-80-192-57-7-az.blueyonder.co.uk. 50c03907
@400000003e19630d2e028aa4 rr c2759855 28800 ns blueyonder.co.uk. 
ns.blueyonder.co.uk.
@400000003e19630d2e029274 rr c2759855 28800 ns blueyonder.co.uk. 
ns2.blueyonder.co.uk.
@400000003e19630d2e02965c rr c2759855 28800 ns blueyonder.co.uk. 
ns3.cableinet.net.
@400000003e19630d2e029a44 stats 41 23260 1 0
@400000003e19630d2e05363c sent 41 68




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3E197779.3040706>