[SOLVED] Can't resolve fake domain even after setup split dns

[soxfan]

Can you totally disable apparmor on this server? Again, I'm more of a Red Hat guy, and I know on the Red Hat (CentOS) side of things it is recommended to disable SeLinux (a similar security-related tool/service).

Also, can you double-check to make sure that named is actually running on this server? ('ps -ef | grep named')

[strafford]

1.

Originally Posted by soxfan

Can you totally disable apparmor on this server? Again, I'm more of a Red Hat guy, and I know on the Red Hat (CentOS) side of things it is recommended to disable SeLinux (a similar security-related tool/service).

The kill didn't work but the stop did. Genius! I tried to use update-rc.d to remove it but that didn't work. So I set apparmor to only complain about named:

sudo aa-complain /usr/sbin/named

2.

Originally Posted by soxfan

Also, can you double-check to make sure that named is actually running on this server? ('ps -ef | grep named')

Yup:

rci@mailserv:~$ ps -ef |grep named
bind      4627     1  0 Mar27 ?        00:00:00 /usr/sbin/named -u bind

Ok, so now it works:

rci@mailserv:~$ nslookup mailserv.rci.ca
Server:         192.168.7.101
Address:        192.168.7.101#53

Name:   mailserv.rci.ca
Address: 192.168.7.101

Thanks so much.