[sf-lug] resolver problem

[Alex Kleider]

Rick,
You taught me (through this mailing list) about powerDNS Recursor and later unbound (when I needed to run it on ARM) several years ago and I often think back with gratitude to those exchanges.
This problem came up during set up and bothered me not so much because I couldn't get around it but because I couldn't understand it.
I do indeed now have unbound running and all seems to be working well.
Again, thanks for your contributions.
alex

a_kleider at yahoo.com

--- On Mon, 8/27/12, Rick Moen <rick at linuxmafia.com> wrote:

From: Rick Moen <rick at linuxmafia.com>
Subject: Re: [sf-lug] resolver problem
To: sf-lug at linuxmafia.com
Date: Monday, August 27, 2012, 11:06 AM

Quoting Alex Kleider (a_kleider at yahoo.com):

> Daniel G was kind enough to spend a lot of time with me at last
> Monday's LUG meeting trouble shooting this problem.  In the end he
> concluded that for reasons never made clear, resolver requests were
> being sent out using TCP instead of UDP and some servers honored that
> and some stuck to the rules and did not.  Changing /etc/resolv.conf
> to point to a server that did seemed to solve the problem (or should I
> say, 'circumvent' the problem, if that is indeed what it was. I can no
> longer reproduce the problem so can not investigate further.)

Yes, but why outsource DNS at all, in the first place?

You can run a full-service recursive nameserver of your own on just
about anything, it completely avoids problems such as the one you 
cite above, it doesnt't take much in the way of machine resources, and 
it pretty much runs itself.  (There's nothing really requiring
administration.)

I can understand people wanting to outsource their authoritative DNS on
grounds of administrative headache (though I do not concur), but
outsourcing recursive DNS seems a bit silly.

(Software?  Your choice of Unbound, PowerDNS Recursor, BIND9, Deadwood,
dnscache.)


_______________________________________________
sf-lug mailing list
sf-lug at linuxmafia.com
http://linuxmafia.com/mailman/listinfo/sf-lug
Information about SF-LUG is at http://www.sf-lug.org/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/sf-lug/attachments/20120828/da5b30b7/attachment.html>