<div dir="ltr">I have a situation with pdns-recursor that I need help with.<div><br></div><div>I am running it on <a href="http://127.0.0.1:53">127.0.0.1:53</a></div><div><br></div><div>My configuration is as below:</div><div>
<br></div><div><div>allow-from=<a href="http://192.168.0.0/16">192.168.0.0/16</a></div><div>#allow-from=</div><div>dont-query=</div><div>config-dir=/usr/local/etc/pdns</div><div>daemon=yes</div><div>quiet=yes</div><div>etc-hosts-file=/etc/hosts</div>
<div>export-etc-hosts=yes</div><div>forward-zones-recurse=.=196.200.16.2,.=196.200.16.27</div><div>local-address=127.0.0.1</div><div>local-port=53</div><div>log-common-errors=yes</div><div>logging-facility=0</div><div>socket-dir=/var/run/</div>
<div>threads=18</div><div>trace=on</div><div><br></div><div style>Now, those two IPs listed in forward-zones-recurse are my ISPs DNS servers.</div><div style>The problem is that whenever I do an nslookup for any domains whose DNS records are handled by my ISP, including my ISPs domain name itself, I get a failure. I however get success when I query for domains outside my ISPs DNS servers:</div>
<div style><br></div><div style>Here are my test results:</div><div style><br></div><div style><div>[root@jaribu] /usr/local/etc/pdns# nslookup <a href="http://www.accesskenya.com">www.accesskenya.com</a></div><div>;; Got SERVFAIL reply from 127.0.0.1, trying next server</div>
<div>;; connection timed out; no servers could be reached</div><div><br></div><div>[root@jaribu] /usr/local/etc/pdns# nslookup <a href="http://www.gmail.com">www.gmail.com</a></div><div>Server: 127.0.0.1</div><div>
Address: 127.0.0.1#53</div><div><br></div><div>Non-authoritative answer:</div><div><a href="http://www.gmail.com">www.gmail.com</a> canonical name = <a href="http://mail.google.com">mail.google.com</a>.</div><div>
<a href="http://mail.google.com">mail.google.com</a> canonical name = <a href="http://googlemail.l.google.com">googlemail.l.google.com</a>.</div><div>Name: <a href="http://googlemail.l.google.com">googlemail.l.google.com</a></div>
<div>Address: 173.194.34.117</div><div>Name: <a href="http://googlemail.l.google.com">googlemail.l.google.com</a></div><div>Address: 173.194.34.118</div><div><br></div><div>[root@jaribu] /usr/local/etc/pdns# nslookup <a href="http://gw.cmehtanbo.com">gw.cmehtanbo.com</a><br>
</div><div>;; Got SERVFAIL reply from 127.0.0.1, trying next server</div><div>;; connection timed out; no servers could be reached</div><div><br></div><div>[root@jaribu] /usr/local/etc/pdns# nslookup <a href="http://gw.kictanet.or.ke">gw.kictanet.or.ke</a></div>
<div>Server: 127.0.0.1</div><div>Address: 127.0.0.1#53</div><div><br></div><div>Non-authoritative answer:</div><div>Name: <a href="http://gw.kictanet.or.ke">gw.kictanet.or.ke</a></div><div>Address: 62.8.64.102</div>
<div><br></div></div><div><br></div><div><br></div><div style>Is it that my configuration is bungled or that of my ISP is? Or is this something known?</div><div style><br></div><div style><br></div><div style><br></div>-- <br>
Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254733744121/+254722743223<br>"I can't hear you -- I'm using the scrambler."<br>
</div></div>