Date: Thu, 26 Oct 2017 18:51:11 +0200 (CEST) From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= <Trond.Endrestol@fagskolen.gjovik.no> To: Chris Maness <christopher.maness@gmail.com> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org> Subject: Re: Strange DNS behavior Message-ID: <alpine.BSF.2.21.1710261845460.44721@mail.fig.ol.no> In-Reply-To: <CANnsUMEu98M8UwES1tCNz9yV=EQue2Knbh1SwDvfuE362CghCg@mail.gmail.com> References: <CANnsUMEu98M8UwES1tCNz9yV=EQue2Knbh1SwDvfuE362CghCg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 26 Oct 2017 08:10-0700, Chris Maness wrote: > I have been running my own DNS for years with glue records and the whole > nine yards. A couple of days ago (without warning) my DNS server stopped > resolving requests external to my local network. If I portscan my server > from outside my local network, I see that TCP port 53 is open. I can use > dig to resolve any host on that server as long as it is local, but if I try > to to use dig from a remote host. It just times out. I thought I might > have been hacked or something, but it does not appear that the named.conf > file has been changed since 2015 (according to the stamp). > > Any suggestions as to what could be the issue? Here are some very basic suggestions. As you probably know, DNS uses UDP and switches to TCP if it receives a truncated response or is told to do TCP right from the beginning. Make sure your ISP hasn't blocked UDP and TCP port 53 in your direction. Check your own packet filter/firewall just to be safe. You can restart your DNS server process, you'll lose whatever's in the cache, but that shouldn't matter too much. -- Trond.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.21.1710261845460.44721>