DNS Broken

Hi,
We recently installed opensuse 11.1 on a rack mount computer (from ABMX, 64 bit) and all was well. Then firefox ceased to work properly. Entering names in the address line (of firefox) gives “Can’t find host” but when the actual IP address is entered the corresponding web page opens. We’ve been working with the network settings and someone suggested the resolv.conf was probably altered outside of the netconfig utility, and this could be the cause. Ultimately the answer is to use a backup of the Network config file (config.orig) and rerun the Network configuration utility. Unfortunately i do not have this file in /etc/sysconfig/network/. Is there a way to get a copy of this?
Thanks

What is in /etc/resolv.conf now and don’t you know what should be there (or what are the DNS servers of your ISP).

Hi,

please type


dig

and post the result here.

You don’t have a resolve.conf or you don’t have a backup copy?

Bye

Erik

Hi,
Thanks for the reply. The contents of resolve.conf follow:

/etc/resolv.conf file autogenerated by netconfig!

Before you change this file manually, consider to define the

static DNS configuration using the following variables in the

/etc/sysconfig/network/config file:

NETCONFIG_DNS_STATIC_SEARCHLIST

NETCONFIG_DNS_STATIC_SERVERS

NETCONFIG_DNS_FORWARDER

or disable DNS configuration updates via netconfig by setting:

NETCONFIG_DNS_POLICY=’’

See also the netconfig(8) manual page and other documentation.

Note: Manual change of this file disables netconfig too, but

may get lost when this file contains comments or empty lines

only, the netconfig settings are same with settings in this

file and in case of a “netconfig update -f” call.

Please remove (at least) this line when you modify the file!

search geol.sc.edu
nameserver xxx.xxx.32.2
nameserver xxx.xxx.41.11
nameserver xxx.xxx.35.2

The name servers were given by the provider. I should have clarified. I am able to use nslookup. Somehow it is capable of resolving the name of the web site associated with the IP.(?)
Using netconfig at this point with the config file in /etc/sysconfig/network/ regenerates the resolv.conf as displayed.
I should also mention that the majority of manual configuration was done via YAST.

I don’t quite get what you problem exactly is. Do I get it right when I state:

  1. doing nslookup on forums.opensus.org gives the correct answer 130.57.4.15;
  2. but typing forums.opensuse.org in FFs addressbar results in “Can’t find host”;
  3. and when you type 130.57.4.15 in FFs addressbar you get the page displayed?

Edit: why so shy about the first two bytes of the IP addresses. This makesit dificult to test for us. And one finds within 3 minutes that they are:

2.32.252.129.in-addr.arpa       name = porsche.psc.sc.edu.
11.41.252.129.in-addr.arpa      name = name0.sc.edu.
2.35.252.129.in-addr.arpa       name = kanga.seis.sc.edu.

Hi,
sheepish grin,
#2 above. Entering numeric ip address finds the website while entering the alpha representation gives “host not found”
The output of nslookup and dig for the forum ip gives:

>> nslookup openSUSE.org
Server: 129.252.32.2
Address: 129.252.32.2#53

Non-authoritative answer:
15.4.57.130.in-addr.arpa name = cot.novell.com.

Authoritative answers can be found from:
4.57.130.in-addr.arpa nameserver = ns2.novell.com.
4.57.130.in-addr.arpa nameserver = ns.novell.com.

>>dig openSUSE.org
; <<>> DiG 9.5.0-P2 <<>> 130.57.4.15
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31999
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;130.57.4.15. IN A

;; AUTHORITY SECTION:
. 10800 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2009101901 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 129.252.41.11#53(129.252.41.11)
;; WHEN: Mon Oct 19 18:36:24 2009
;; MSG SIZE rcvd: 104

Server: 129.252.32.2
Address: 129.252.32.2#53

Non-authoritative answer:
15.4.57.130.in-addr.arpa name = cot.novell.com.

Authoritative answers can be found from:
4.57.130.in-addr.arpa nameserver = ns2.novell.com.
4.57.130.in-addr.arpa nameserver = ns.novell.com.

Thanks again and in advance for your assistance.

I do not know why you use opensuse.org instead of forums.opensuse.org in your tests with nslookup and dig, but I think the effect will be the same.

Using nslookup and dig as DNS-clients show that your DNS servers function. My conclusion: it is not a DNS problem.

Did (or can) you try a different browser (like Konqueror) to see if the same problem persists?

Can you post the output of

cat /etc/nsswitch.conf | grep hosts

Maybe something is broken there.

Konquerer gives the same results as firefox, “Hosts not found” entering “forums.opensuse.org”, and the page loads using the ip. The command:
cat /etc/nsswitch.cong | grep hosts
results in

hosts: files dns

I will also mention that there was a suggestion to try disabling ipv6 on firefox and in yast. Though attempting these web pages with ipv6 enabled didn’t seem to make a difference

jefferyp 3157 wrote:

>
> Konquerer gives the same results as firefox, “Hosts not found” entering
> “forums.opensuse.org”, and the page loads using the ip. The command:
> cat /etc/nsswitch.cong | grep hosts
> results in
>
> hosts: files dns
>
> I will also mention that there was a suggestion to try disabling ipv6
> on firefox and in yast. Though attempting these web pages with ipv6
> enabled didn’t seem to make a difference

I had a very similar results when I screwed up the proxy setting for FF. Is
that a possibility?


Will Honea

On Mon October 19 2009 03:36 pm, jefferyp 3157 wrote:

>
> Konquerer gives the same results as firefox, “Hosts not found” entering
> “forums.opensuse.org”, and the page loads using the ip. The command:
> cat /etc/nsswitch.cong | grep hosts
> results in
>
> hosts: files dns
>
> I will also mention that there was a suggestion to try disabling ipv6
> on firefox and in yast. Though attempting these web pages with ipv6
> enabled didn’t seem to make a difference
>
>
jefferyp;

Have you tried disabling IPv6 in YaST (under network card)?

P. V.
“We’re all in this together, I’m pulling for you.” Red Green

Hm, mine (10.3) shows:

boven:~ # cat /etc/nsswitch.conf | grep hosts
hosts:          files mdns4_minimal [NOTFOUND=return] dns
boven:~ #

But I do not think yours is wrong (infact I do understand what you have and not what mine meeans).

The switching off of IPv6 in YaST is certainly something I should try.

You do not have strange things in /etc/hosts (when in doubt post it here)?

Hi,
Well, I’ve checked the /etc/hosts file and it is a bit odd. Does not resemble the other OpenSuSE systems we have running (10.3).
> cat /etc/hosts

special IPv6 addresses

#::1 localhost ipv6-localhost ipv6-loopback
127.0.0.2 vxwhost.local vxwhost
127.0.0.1 localhost
129.252.77.13 geol.sc.edu geol

It may be a bit different, bur I do not see any problems here. The first two ine are commented out. Next line is the system itself (apperently called vxwhost). The following line is the normal localhost one. and the last is another system, but that is not one of the sytems we have problems with.

I am a bit out of steam here. I did:

boven:~ # ping forums.opensuse.org
PING forums.opensuse.org (130.57.4.15) 56(84) bytes of data.
^C
--- forums.opensuse.org ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5020ms

boven:~ #

(where the ^C is I did Ctrl-c to cancel the process because there is no answer). It is not about the answer, but again about the host resolving. Must give the same results as a browser because it uses the same library routines. Nevertheless you couldd try this.

Hi,
Thanks very much for your help and thoughts on this. I’m going to try one or two more things and then reload the operating system. It’s a bit annoying because we had configured this system to run an instrument, and I have to start from scratch. live and learn eh? Thanks again for everything.
Jeff

You are welcome. Sorry I could not be of more help, but it is often difficult when you are not at the system.

Hope the reinstall helps. And make notes of all the steps you do to create the system you need. That s better for next time :wink: