This problem almost made me crazy and was about to give up on bind until I found the problem. I tried every thing: I was configuring bind on a KVM VM, I thought may be its the Bridge or the KVM's internal network bug. I tried bind on a physical machine, but the problem was same! I tried it on Fedora 14, same problem! Next I tried it on different versions of bind, but the error was the exact same!
Here are the errors I was getting in the named.run logs:
DNS format error from 128.63.2.53#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answerSo basically bind was getting a malformed response from all the root level servers it was trying in the hint file named.ca
error (FORMERR) resolving 'yahoo.com/A/IN': 128.63.2.53#53
DNS format error from 202.12.27.33#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 202.12.27.33#53
DNS format error from 192.5.5.241#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.5.5.241#53
DNS format error from 192.36.148.17#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.36.148.17#53
DNS format error from 128.8.10.90#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 128.8.10.90#53
DNS format error from 193.0.14.129#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 193.0.14.129#53
DNS format error from 192.112.36.4#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.112.36.4#53
DNS format error from 199.7.83.42#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 199.7.83.42#53
DNS format error from 192.33.4.12#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.33.4.12#53
DNS format error from 192.203.230.10#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.203.230.10#53
DNS format error from 198.41.0.4#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 198.41.0.4#53
DNS format error from 192.228.79.201#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.228.79.201#53
DNS format error from 192.58.128.30#53 resolving yahoo.com/A for client 127.0.0.1#39224: reply has no answer
error (FORMERR) resolving 'yahoo.com/A/IN': 192.58.128.30#53
The Solution:
After enabling the debug mode and monitoring traffic with tcpdump, I found the problem. The culprit was my DSL router (AzTech 605EW). And apparently most home dsl routers will behave abnormally with large udp packets. The large udp packets are because bind uses EDNS when querying other DNS servers.
Adding the following configuration in named.conf disabled edns and solved the problem!
server ::/0 { edns no; };
server 0.0.0.0/0 { edns no; };
Thank you so much Khizer, solved!!! :D
ReplyDeleteI am glad it helped :)
Deletewww.omgab.com 우리카지노사이트
ReplyDeletewww.omgab.com/theking 더킹카지노
www.omgab.com/sands 샌즈카지노
www.omgab.com/first 퍼스트카지노
www.omgab.com/yes 예스카지노
www.omgab.com/super 슈퍼카지노
www.omgab.com/gatsby 개츠비카지노
www.omgab.com/33 33카지노
www.omgab.com/world 월드카지노
www.omgab.com/merit 메리트카지노
www.omgqq.com 우리카지노사이트
ReplyDeletewww.omgqq.com/thekingcasino 더킹카지노
www.omgqq.com/sandscasino 샌즈카지노
www.omgqq.com/firstcasino 퍼스트카지노
www.omgqq.com/yescasino 예스카지노
www.omgqq.com/supercasino 슈퍼카지노
www.omgqq.com/gatsbycasino 개츠비카지노
www.omgqq.com/33casino 33카지노
www.omgqq.com/worldcasino 월드카지노
www.omgqq.com/merit 메리트카지노
www.bbdd66.com 우리카지노사이트
ReplyDeletewww.bbdd66.com/theking 더킹카지노
www.bbdd66.com/sands 샌즈카지노
www.bbdd66.com/first 퍼스트카지노
www.bbdd66.com/yes 예스카지노
www.bbdd66.com/super 슈퍼카지노
www.bbdd66.com/gatsby 개츠비카지노
www.bbdd66.com/33 33카지노
www.bbdd66.com/world 월드카지노
www.bbdd66.com/merit 메리트카지노
www.omgka.com 우리카지노사이트
ReplyDeletewww.omgka.com/theking 더킹카지노
www.omgka.com/sands 샌즈카지노
www.omgka.com/first 퍼스트카지노
www.omgka.com/yes 예스카지노
www.omgka.com/super 슈퍼카지노
www.omgka.com/gatsby 개츠비카지노
www.omgka.com/33 33카지노
www.omgka.com/world 월드카지노
www.omgka.com/merit 메리트카지노