Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Installation
Reload this Page [SOLVED] dig does not return anything

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
Page 2 of 3 < 1 2 3
 
LinkBack Thread Tools Search this Thread Display Modes
  #11 (permalink)  
Old 02-08-2010, 11:50 AM
Moderator
  
Posts: 1,147
Default
You have 3 PTR records set up currently:
Code:
10.100.177.205.hcjbc.org.	IN	PTR	bcldap.hcjbc.org
10.100.177.200.hcjbc.org.	IN	PTR	bcmailbox.hcjbc.org
10.100.177.210.hcjbc.org.	IN	PTR	bcmta.hcjbc.org
The problem with them is that every application when looking up a PTR record for aaa.bbb.ccc.ddd will query the DNS server for "ddd.ccc.bbb.aaa.in-addr.arpa." but the PTR records you have setup only provide information for 10.100.177.200.hcjbc, so these records will never be used and are pointless. You should create the zone in-addr.arpa. similar to what I posted so that you have valid PTR records as a mail server needs them, and most other applications expect it.
(Also if you actually test those queries you are missing the "." at the end so it really returns "bcmta.hcjbc.org.hcjbc.org.", but since it will never get queried it doesn't really matter )

Another thing which I forgot to mention last time is that MX records are supposed to have the FQDN of the server, not it's IP address. This is why it is showing "10.100.177.200.hcjbc.org." as your mail server. You entered in 10.100.177.200, and bind properly saw there was no terminating "." on there so it added the origin of "hcjbc.org.".

Since you have it split up I believe the MX record should be pointing to the MTA, so
Code:
hcjbc.org.	380000	IN	MX	10 bcmta.hcjbc.org.
Reply With Quote
  #12 (permalink)  
Old 02-11-2010, 01:32 PM
Intermediate Member
  
Posts: 22
Default
Ok, so I have my Forward zone, Reverse zone, and my mx records set to the domain and not the machine. I get answers for all the above requested commands, but when I set up the bcmailbox (store) I get the password not verified. What am I to do now? I see alot of posting on this subject about the name not being verified with dns, but I can ping all three ways.
Reply With Quote
  #13 (permalink)  
Old 02-11-2010, 02:11 PM
Moderator
  
Posts: 1,147
Default
On bcmailbox what is the output of these:
Code:
dig bcmailbox.hcjbc.org. A
dig -x 10.100.177.200
Reply With Quote
  #14 (permalink)  
Old 02-11-2010, 08:58 PM
Intermediate Member
  
Posts: 22
Default
Code:
> dig bcmailbox.hcjbc.org. A 

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> bcmailbox.hcjbc.org. A
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4030
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;bcmailbox.hcjbc.org.		IN	A

;; ANSWER SECTION:
bcmailbox.hcjbc.org.	38400	IN	A	10.100.177.200

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	NS	10.100.177.205.
hcjbc.org.		38400	IN	NS	10.100.177.200.

;; Query time: 6 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Thu Feb 11 22:12:59 2010
;; MSG SIZE  rcvd: 109
All is well, until ...
Code:
>  dig -x 10.100.177.200

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> -x 10.100.177.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 991
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;200.177.100.10.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
10.in-addr.arpa.	8820	IN	SOA	prisoner.iana.org. hostmaster.root-servers.org. 2002040800 1800 900 604800 604800

;; Query time: 2 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Thu Feb 11 22:13:04 2010
;; MSG SIZE  rcvd: 122
Reply With Quote
  #15 (permalink)  
Old 02-15-2010, 10:42 AM
Moderator
  
Posts: 1,147
Default
That "dig -x" causes it to do a reverse lookup of the IP address. The full query as you can see is the "200.177.100.10.in-addr.arpa. IN PTR", just like I mentioned earlier. Simply add the domain like I showed you and that query should return results.

What exactly did you mean by "when I set up the bcmailbox (store) I get the password not verified"? What is giving you that error?
Reply With Quote
  #16 (permalink)  
Old 02-23-2010, 08:45 PM
Intermediate Member
  
Posts: 22
Question
Ok, I am lost, this is the only thing I get back for dig -x 10.100.177.200

Code:
; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> -x 10.100.177.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;205.177.100.10.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
10.in-addr.arpa.	10800	IN	SOA	prisoner.iana.org. hostmaster.root-servers.org. 2002040800 1800 900 604800 604800

;; Query time: 716 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Tue Feb 23 22:40:15 2010
;; MSG SIZE  rcvd: 122
and my zone file is pretty much the same way as your example:
Code:
$ttl 38400
@	IN	SOA	bcdc.hcjbc.org. hcjbc.yahoo.com. (
			2009091303
			3H
			1H
			1W
			1D )
	IN	NS	bcdc.hcjbc.org.
0.177.100.10.in-addr.arpa.	IN	DNSKEY	257 asdfasdfasdfasdf
0.177.100.10.in-addr.arpa.	IN	DNSKEY	256 asdfasdfasdfasdf
205.177.100.10.in-addr.arpa.	IN	PTR	bcdc.hcjbc.org.
200.177.100.10.in-addr.arpa.	IN	PTR	bcmailbox.hcjbc.org.
0.177.100.10.in-addr.arpa.	38400	IN	RRSIG	SOA 3 6 38400 20100326033335 20100224033335 41061 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
0.177.100.10.in-addr.arpa.	38400	IN	RRSIG	NS 3 6 38400 20100326032601 20100224032601 41061 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
0.177.100.10.in-addr.arpa.	86400	IN	NSEC	0.177.100.10.in-addr.arpa. NS SOA RRSIG NSEC DNSKEY
0.177.100.10.in-addr.arpa.	86400	IN	RRSIG	NSEC 3 6 86400 20100326033335 20100224033335 41061 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
0.177.100.10.in-addr.arpa.	38400	IN	RRSIG	DNSKEY 3 6 38400 20100319023834 20100217023834 20048 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
0.177.100.10.in-addr.arpa.	38400	IN	RRSIG	DNSKEY 3 6 38400 20100319023834 20100217023834 41061 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
177.100.10.in-addr.arpa.	86400	IN	NSEC	0.177.100.10.in-addr.arpa. RRSIG NSEC
177.100.10.in-addr.arpa.	86400	IN	RRSIG	NSEC 3 5 86400 20100326033335 20100224033335 41061 0.177.100.10.in-addr.arpa. asdfasdfasdfasdf
What am I doing wrong??????
(I did change the bcldap to bcdc)
Last edited by martinezjr; 02-23-2010 at 08:50 PM..
Reply With Quote
  #17 (permalink)  
Old 02-24-2010, 10:50 AM
Moderator
  
Posts: 1,147
Default
Hmmm, silly question: Are you sure that you actually added that zone to the zones BIND serves up?
If it is showing up in the list of zones bind shows when it first starts, then I am not sure what the problem is here...


(Also just wondering: is bcdc behind a WAN link or something? "Query time: 716 msec" is retardedly long for a LAN connection)
Reply With Quote
  #18 (permalink)  
Old 02-24-2010, 08:01 PM
Intermediate Member
  
Posts: 22
Default
My named.conf file:
Code:
options {
	listen-on {
		127.0.0.1;
		10.100.177.205;
		};
	listen-on-v6 port 53 { ::1; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
	recursion yes;
	dnssec-enable yes;
	dnssec-validation yes;
	dnssec-lookaside . trust-anchor dlv.isc.org.;
	notify no;
	allow-query {
		any;
		};
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};


include "/etc/named.rfc1912.zones";

include "/etc/pki/dnssec-keys//named.dnssec.keys";
include "/etc/pki/dnssec-keys//dlv/dlv.isc.org.conf";
controls {
	inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { rndckey; };
	};

key rndckey {
	algorithm hmac-md5;
             //not actual code
	secret "asdfghjkl";
	};
zone "hcjbc.org" {
	type master;
	file "/var/named/hcjbc.org.hosts";
	notify no;
	allow-query {
		any;
		};
	};
zone "0.177.100.10.in-addr.arpa" {
	type master;
	file "/var/named/10.100.177.0.rev";
	notify no;
	allow-query {
		any;
		};
	};
and today's results:
Code:
[root@bcdc etc]# dig -x 10.100.177.200

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> -x 10.100.177.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;200.177.100.10.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
10.in-addr.arpa.	10445	IN	SOA	prisoner.iana.org. hostmaster.root-servers.org. 2002040800 1800 900 604800 604800

;; Query time: 2 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Wed Feb 24 21:49:00 2010
;; MSG SIZE  rcvd: 122

[root@bcdc etc]#
Reply With Quote
  #19 (permalink)  
Old 02-25-2010, 10:10 AM
Moderator
  
Posts: 1,147
Default
Ah ha, there is your problem. The zone should be
Code:
zone "177.100.10.in-addr.arpa" {
The "0." that you had at the start would be an entry within the file (if it was a valid address to query).
Reply With Quote
  #20 (permalink)  
Old 02-25-2010, 06:49 PM
Intermediate Member
  
Posts: 22
Talking Solved,........................................... .........................for now
So,.....Where do I send the check?......


It's the simple things in life that matter. Like not ending a statement with a semicolon. Or not escaping quotation marks correctly. Or adding an extra octet to your reverse zone.

Code:
[martinezjr@bcdc ~]$ dig -x 10.100.177.205

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> -x 10.100.177.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34784
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;205.177.100.10.in-addr.arpa.	IN	PTR

;; ANSWER SECTION:
205.177.100.10.in-addr.arpa. 38400 IN	PTR	bcdc.hcjbc.org.

;; AUTHORITY SECTION:
177.100.10.in-addr.arpa. 38400	IN	NS	bcdc.hcjbc.org.

;; ADDITIONAL SECTION:
bcdc.hcjbc.org.		38400	IN	A	10.100.177.205

;; Query time: 2 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Thu Feb 25 20:34:58 2010
;; MSG SIZE  rcvd: 103

[martinezjr@bcdc ~]$ dig mx hcjbc.org

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> mx hcjbc.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21885
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;hcjbc.org.			IN	MX

;; ANSWER SECTION:
hcjbc.org.		38400	IN	MX	100 bcmta.hcjbc.org.

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	NS	bcdc.hcjbc.org.

;; ADDITIONAL SECTION:
bcdc.hcjbc.org.		38400	IN	A	10.100.177.205

;; Query time: 5 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Thu Feb 25 20:36:52 2010
;; MSG SIZE  rcvd: 84

[martinezjr@bcdc ~]$ dig any hcjbc.org
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.6.1-P3-RedHat-9.6.1-10.P3.fc11 <<>> any hcjbc.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8562
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 12, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;hcjbc.org.			IN	ANY

;; ANSWER SECTION:
hcjbc.org.		38400	IN	RRSIG	SOA 3 2 38400 20100326033648 20100224033648 47944 hcjbc.org. asdf
hcjbc.org.		38400	IN	RRSIG	NS 3 2 38400 20100326033648 20100224033648 47944 hcjbc.org. asdf
hcjbc.org.		38400	IN	RRSIG	MX 3 2 38400 20100319024144 20100217024144 47944 hcjbc.org. asdf
hcjbc.org.		38400	IN	NSEC	bcdc.hcjbc.org. NS SOA MX RRSIG NSEC DNSKEY
hcjbc.org.		38400	IN	RRSIG	NSEC 3 2 38400 20100326023305 20100224023305 47944 hcjbc.org. asdf
hcjbc.org.		38400	IN	RRSIG	DNSKEY 3 2 38400 20100319023426 20100217023426 32861 hcjbc.org. asdfQ=
hcjbc.org.		38400	IN	RRSIG	DNSKEY 3 2 38400 20100319023426 20100217023426 47944 hcjbc.org. asdf
hcjbc.org.		38400	IN	SOA	bcdc.hcjbc.org. hcjbc.yahoo.com. 1266377668 10800 3600 604800 38400
hcjbc.org.		38400	IN	NS	bcdc.hcjbc.org.
hcjbc.org.		38400	IN	DNSKEY	257 3 3 asdf7
hcjbc.org.		38400	IN	DNSKEY	256 3 3 asdf
hcjbc.org.		38400	IN	MX	100 bcmta.hcjbc.org.

;; ADDITIONAL SECTION:
bcdc.hcjbc.org.		38400	IN	A	10.100.177.205

;; Query time: 9 msec
;; SERVER: 10.100.177.205#53(10.100.177.205)
;; WHEN: Thu Feb 25 20:36:57 2010
;; MSG SIZE  rcvd: 1501

[martinezjr@bcdc ~]$ host `hostname`
bcdc.hcjbc.org has address 10.100.177.205
[martinezjr@bcdc ~]$ host -v hcjbc.org
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8839
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	A

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	SOA	bcdc.hcjbc.org. hcjbc.yahoo.com. 1266377668 10800 3600 604800 38400

Received 83 bytes from 10.100.177.205#53 in 1 ms
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53221
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;hcjbc.org.			IN	AAAA

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	SOA	bcdc.hcjbc.org. hcjbc.yahoo.com. 1266377668 10800 3600 604800 38400

Received 83 bytes from 10.100.177.205#53 in 1 ms
Trying "hcjbc.org"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34624
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;hcjbc.org.			IN	MX

;; ANSWER SECTION:
hcjbc.org.		38400	IN	MX	100 bcmta.hcjbc.org.

;; AUTHORITY SECTION:
hcjbc.org.		38400	IN	NS	bcdc.hcjbc.org.

;; ADDITIONAL SECTION:
bcdc.hcjbc.org.		38400	IN	A	10.100.177.205

Received 84 bytes from 10.100.177.205#53 in 2 ms
[martinezjr@bcdc ~]$
Reply With Quote
Reply
Page 2 of 3 < 1 2 3

« Previous Thread | Today's Posts or Week's Posts | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Linear Mode Linear Mode


Similar Threads

Product Information

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com


Home - Blog - Contact Us - Archive - Top


 

SEO by vBSEO ©2011, Crawlability, Inc.