non-responsive Auth-DNS-Server

Discussion in 'ISPConfig 3 Priority Support' started by bitworx, Jul 21, 2021.

Tags:
  1. bitworx

    bitworx New Member

    Hi!
    Following problem:

    Since I think yesterday or the day before my auth DNS server ns1.bitworx.cloud (according to the Perfect Multiserver-Setup by Th0m) seems no to answer public dns requests.
    I tried via some web services (e.g. https://dnschecker.org/domain-health-checker.php?query=tanzsportclub.at ) or via dig from one of my other servers in another net, not connected to the internal net of my ispconfig-setup.

    Setup:
    host.bitworx.cloud (web,db,panel,mx,...) : 10.0.0.1
    ns1.bitworx.cloud (ns1 auth) : 10.0.0.2
    ns2.bitworx.cloud (ns2 slave -> not set as slave in ispconfig as Th0m stated to do the slave zones manually) : 10.0.0.3

    Master and Slave DNS settings for tanzsportclub.at
    https://imgur.com/a/Uglhmj4

    If you do
    Code:
    dig any tanzsportclub.at
    it responds:
    Code:
    ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> any tanzsportclub.at
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33192
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 1
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ;; QUESTION SECTION:
    ;tanzsportclub.at.              IN      ANY
    
    ;; ANSWER SECTION:
    tanzsportclub.at.       300     IN      NS      ns1.bitworx.cloud.
    tanzsportclub.at.       300     IN      NS      ns2.bitworx.cloud.
    tanzsportclub.at.       300     IN      SOA     ns1.bitworx.cloud. office.bitworx.digital. 2021072104 7200 540 604800 3600
    tanzsportclub.at.       300     IN      MX      10 mail.tanzsportclub.at.
    tanzsportclub.at.       300     IN      AAAA    2a05:d014:78f:7600:a93e:5674:aea3:386e
    tanzsportclub.at.       300     IN      A       52.28.179.196
    
    ;; Query time: 1 msec
    ;; SERVER: 172.26.0.2#53(172.26.0.2)
    ;; WHEN: Wed Jul 21 09:28:17 UTC 2021
    ;; MSG SIZE  rcvd: 217
    but I think it should look like
    Code:
    dig @ns1.bitworx.cloud any tanzsportclub.at
    :
    Code:
    ; <<>> DiG 9.11.5-P4-5.1+deb10u5-Debian <<>> @ns1.bitworx.cloud any tanzsportclub.at
    ; (2 servers found)
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38521
    ;; flags: qr aa rd; QUERY: 1, ANSWER: 30, AUTHORITY: 0, ADDITIONAL: 2
    ;; WARNING: recursion requested but not available
    
    ;; OPT PSEUDOSECTION:
    ; EDNS: version: 0, flags:; udp: 4096
    ; COOKIE: 8ae7084dcda317550100000060f7e8ef8e3ea2dc5c2ecf32 (good)
    ;; QUESTION SECTION:
    ;tanzsportclub.at.              IN      ANY
    
    ;; ANSWER SECTION:
    tanzsportclub.at.       3600    IN      SOA     ns1.bitworx.cloud. office.bitworx.digital. 2021072106 7200 540 604800 3600
    tanzsportclub.at.       3600    IN      RRSIG   SOA 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. wcuMjpZf8nQBZzZR0lCslI4Gombr4CNhdr/1Px7znh0kB/jz+Y+H5Xxm ydXoG6WR9HQu8bv3ndKo+ZUPbSCcZ9BSre2XiHrieS+4/nP3q9/14umQ DTWZaYBLXNsb4jGuxmMfKwUyNCaeleJQx8V5PFPLxa8Mlf4aJTAxMCJ7 Rwv2Gey/hCEUKQyQXwg3W74OCTg1zMWMXXDs0/4hnjVYKBTlDpepsa02 h/+SwaICFfr1PXuxubplGKg09j0kJ1U4ZupnAa3rlEkDzKFLRQpzjRuJ Etf7HI50tX/JiLUBNg3g/JN267rFSCM4K68d0Zh/vqM5VUW5HXMAmsN+ siJ2Iw==
    tanzsportclub.at.       3600    IN      RRSIG   SOA 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. 3Le+e/SQBeMmQs7LcyCdf5HHtrjuWrh1VVO4T2yBmdccXo2CQDi1evg6 uaaN3fWq3WwGHIqX4T1n1uY7Y3/sLw==
    tanzsportclub.at.       3600    IN      NS      ns2.bitworx.cloud.
    tanzsportclub.at.       3600    IN      NS      ns1.bitworx.cloud.
    tanzsportclub.at.       3600    IN      RRSIG   NS 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. rjsaSViYA9/iBV3axBdbOi5Jo/CNPFzWBO8HmYxDh+6/HpwxzWQaOwnq Prl/G6p1Vtrw9aXfh8Kl9zF+G4j6GpWNv/6t9QzLPvt75oRM7dTn/aWF BrT7VeP6Wq/iHRjdJ0rp8zzcnTujxVPXOdy12uCf7t9wqMzg6XvfXylI q3equgIAKTWFrX2EUFmc23OSRKtqvVYGQ29ruRDcvKYCWlVwhuq9nMDx BkUG8zb8oDsPsRa8/lyBdG3WK7wwzTJQjLREL46QWgAJoY+WfgMqIYiQ fGbRZTUXJCLd30lu5bOGypZu1GLFvFVfATRVUJoRxYHE7ogQ6d5SleZ/ PUI9eA==
    tanzsportclub.at.       3600    IN      RRSIG   NS 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. 8KR+drB6h0RoPV5CPRnSRZbTmv5l/PSqnX0ZJevAS+DghwLVKw/dozny Y05JAX3RIBXH53VU5qZuKrcmZO1rZA==
    tanzsportclub.at.       3600    IN      A       52.28.179.196
    tanzsportclub.at.       3600    IN      RRSIG   A 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. Kj0dLso4Scuw8cdnW/8pGD8i66JRwHo4tgkgGrKn4l+RUBKWP8Uyn3AS YHqwEP2LCKMK5rjSvIu+qMa4d7zOR/htlRlYmc35owOAfMrkcTFIGnTq 8aom0buqy0TLpo13VgBlYHW93tjoyZyI9T2cm2NOUQqzllomnSTx/BtM GlLZZUI+Ibt6MGGyNCuKtlzhX3cJCusqqzGFM2JrY5N5Hxz6jE/iP+5g MCoo7fcNufOAbtCVYj3fWMoERTaHzs4Za6BHJ13m7ViPGyCy6APKl7vG Zmu7XMZtb2SBZ3aooa/QLsxlildiUQtSusbDTi++mezI8aqP5IEeua/4 /i7G9Q==
    tanzsportclub.at.       3600    IN      RRSIG   A 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. XjEHmjjxIzrn68PyK4HorXGe0UM4UwdVyeEXjp1dxqxH+JGU+nq9PvUC 9xEpwypT9/KkmGoBXaLRtPI10GiCXw==
    tanzsportclub.at.       3600    IN      MX      10 mail.tanzsportclub.at.
    tanzsportclub.at.       3600    IN      RRSIG   MX 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. f33yaquL00xwbbuYFM5ejQStI6y1GbvOezXJhhygIeWheOX2K6KMUXf2 K5MlCVI/eudSJj8TlG7PTvoW6V3zzb2ShWd40yjn5YDHEdCamDbU0goV k8WAYrbWUa7huIfv7KAfcSf1xQAYdsjAZkAa8qHwuAetpp32Zr2aoQly KCo/8Ci/E9itiAz8ANOHKQFOOaZOxjVQxAUY+hfJ0QCP8Q4Zc5+sgr+s A8E0FinryqHHS1uvr1oe3CktzkDhIIIV4+Ee06+hKXEAH8FcQn3BalT8 ULZdTVn9nwpOJ2M9/hCEN4MrCKgbu/bTyuf7U8ieCHYNlQnBQ0/vGlGS ndrcxw==
    tanzsportclub.at.       3600    IN      RRSIG   MX 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. Hn0JtFNle9epxGmYNix1TGeDl5wrUlqEfGuKzxLSjzV6rQbU5geyZa/b iGFIq/GCbTiNoymEHiVLk7zwd8xm3A==
    tanzsportclub.at.       3600    IN      TXT     "v=spf1 mx a ~all"
    tanzsportclub.at.       3600    IN      RRSIG   TXT 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. Ejj9sc04Dfc/daIFS40eM27PXTdIxkmcwQTiveeHxd2bYKHQhRv6XzBr Rvs3rrYXJt5/yjVmONru02Vj9MEgKL4hbTSbjntxf3oMebaFVONN16y0 Rli7MoFPEIMaTQInGNWiaqIDLGePCunHmfcejp9Dzr5BqOXNtdRrHASW u91vhpBEFTzmrWYQa38L22MjPGOztnOqDIAgwtG5VJbquU6XlnxhXl4D rKScxeLsZPeSTgAgvbxetA5TboQRySskNAKj1YbnzEIhYU5d3WtnaJfY uq/O/ksP08v8mtKRjoK3wLmmiiBHveSaRO11cBAg6RlWWVp5Vk5bY80f mvGeRA==
    tanzsportclub.at.       3600    IN      RRSIG   TXT 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. Ies4Fx1S7yUMLNnRsOLNyp3MrC7Iw5F/fyVwO/ZOhVR4A4xA3sqaOfT8 kZNR2JQO88wPozRAJIZ425zO+KcdTQ==
    tanzsportclub.at.       3600    IN      AAAA    2a05:d014:78f:7600:a93e:5674:aea3:386e
    tanzsportclub.at.       3600    IN      RRSIG   AAAA 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. P9o8/EHlEACttxH1S1dVFVaLUm8vHYT9wlvSVCZ4SplONCX+q+XdTHi0 m2fzeGK1ZMrpHoso8Ph5/bGI1rA6Q8M3hA53g45oKIJH0eg8EwJ+xkTP POVsJBEpIENG8YkcmjMtZKlmgx0vrAho5TE6hJpGMuYEPKBM6tEoNbj+ 8QITvDB31klh9C+uDj5SKWvEjNmrCa5zNyduXfAVMutH1563iyAZApUz 8lMovrv2jntDWUikdy0LgVF6Vmruh/a7ZlFxgqbVW7F+I3QutrrJZdto 29zMYkd9Nw52N8xgfuZCkr7/c6+wajklZaL9IBm+jrj0Z7iOQoC6bm4G T85jHQ==
    tanzsportclub.at.       3600    IN      RRSIG   AAAA 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. DP39P920zGUnZeGPXfW7K+lGcvodqhH3VUopblFKeyeyD+3mDF73Si83 M3Q+YxR+PfqA3DodWRP0GbrDCRTfzQ==
    tanzsportclub.at.       3600    IN      DNSKEY  257 3 7 AwEAAa3zaBJ/lYZcDULiD0axMBc6OGsbhatgE1UK6vuVnuHl2iaBaZUA R+r59XoXGqMI54kOzAE94kPM8p4WxMryeQaUgX2bH9yRhvhXxufhcoDU x+c+eu1UluO8h5RuKJKMVKoyacDe2DlAvwWMh6l6TGyy1Mh6WMjyrLvn XD46f9La9SgEWR73oxbMblRjYGITGz8daOtGvF1LcJNoEN9ThehoZcr/ 0UAOc2RglT7+SkmVD29yDwciJViRO7jvLVeXsucLlKKmhH0YNhnNlN1U sppKyxOWY+a3rDGV6oyiHmE5mCsVk49+Rl9WRN5eUWbP+9vgTOOhhZhO LP3dE7OD+aUyFwB4uyDCbN7rM25jY4p9PStnVcgyS4Wl+s+OTE6MjkKA 7d/O4ivZfpVF5y3hY3c/XVssG5UIG0uSWJYV0kxweeyJ/y8aH89Ul0u8 +Tprkl6/rWhCRooTMqGKJQfLfBbkreCkGXqetPEBX8sHpou4DGpkZ+7i 9JQW1/V1kWebt/eDeabH3Qir4RHj+OLVaH84lmYVeEywwFi5SUMn2geH LkfkLIvljk7Di3ZAU6zdePiKtVt5ctHh5jJASaR/zFAZW4eyEl8rjQC2 fKYb4Kq97NIVpaGEklNADv026VOry3q1TlZtHaYLgnPgyqZTmgAXnpMj OyP5ISLppoKfYFZp
    tanzsportclub.at.       3600    IN      DNSKEY  256 3 13 HEg+3y3nN35JezHDmLPwZ4gGLWF3980yCfxsFdY0D1wTzSCDCodxMX9T 3Mss9EzN4uPSX3oSASIVQUvnGG9Mig==
    tanzsportclub.at.       3600    IN      DNSKEY  256 3 7 AwEAAezQck5TgMUlCnFZetmoJpR5oVFi0Xc40Ggs95aw6dNwPePscGP3 25BbAvi3vhkwTR5qJU+dSZgVKmgYrlw+bGY04Uq4J9UKgan7tgL7DIJ/ LUF46oBmKSvAXx5KmEoR3Uq1xxjLhzEQYiqh0bUrjbQk5CbSAyKRVwR8 DbWi2GShSqhlDVBryTeyelEyDRfFoBRei2cI4eHhyPtQASCt4dJC2dLd qedqkwD6MY3Y0Joen7czXVN3ZajVxePy8C+tokgZA3qv39Y5HwQeghme 2TSI1XRkqDgJACg1BO8sV6ZiNvEdj7TKoINdIbKaDKKk+z0uTkNPduh+ 9dHDo1i8bBU=
    tanzsportclub.at.       3600    IN      DNSKEY  257 3 13 cEqW6ZkvVVdcEy2G0HY/s/J6E8QXZdEZBfpqulJK3DkPrIruHVsu2E21 oPM/BQngY5v7EKQT7vVMWLA0319rYA==
    tanzsportclub.at.       3600    IN      RRSIG   DNSKEY 7 2 3600 20210806082201 20210721082201 55985 tanzsportclub.at. DlhMqjTMgF7h0OwimorIrJb9AVitlQWI6xB7quaBs/TLFojh7EeQYBO9 ihSxiF4cW7L3gB48gq4pGdXGkkLtzfn/SDChwSNY/uA929XXu8YHhPzw tVwahtV/b04qAgkyMHlGnSTNpneOK38KMmYIQaVrGbvDaXE4ZNC3EmV8 jMCMQs7qCyTaaPtp5PNZstpqH3ANiciaBdBwkNvkP0lzqn+s976qG85a ITyswyMvdtRZBKeRNksVnKZKFP0xM1knVWmPcVNPFYmrnzMcdEUoBTb7 6frVgi5lLo+R7RwcDgjeqLgt8ZDzCmdLUoAK0/3ZZDeN1vWyv+GNzTae O41zTg==
    tanzsportclub.at.       3600    IN      RRSIG   DNSKEY 7 2 3600 20210806082201 20210721082201 62614 tanzsportclub.at. mFRad5iMtmQb2MUG8CMKZH8BelOtwbhLquKSiB/5pw6xf71RfDKAh1LR oL8s9zrODvayg531RNgl13xqn2AkuS8rfjWs8sLFaKfKgf99Mr5ONBaO LWZneMnq9wRpb7cI3U929XnFkJcC/eeaPyx7dE9/bW2KzRY1cAO4F1iZ xhuHXj9CkJLm9DjdbYq4rZlIzmb2hMpsrEPZKIYEV7HRw7XsEGpBSdQC mKf0NYt35nq5Fat7SbNB0NBk08Y+WEJRmF77nB/h5EEYsBhoImmeO2SP Bf98PA5YS5x+0cCQ2K4d1TvD1DzWMJvvGD1BvD7scoHOH2vC8qfI36x0 aBjoTjEUZty/Y/fgPOYwbq1Eu3cfug+axxMqzkF+LKiroquQ4zE3uh+C zQzbLRCYVwliuYxRbAl3K5ib4VHX1kE1jdGkJ6jQ5lDEnzFQYDrWrSEt yHOPJpcAvBGpD/ljS5w33U4IAo5xdj47BtYBjSplfo//M5a0X1/bOLQb 9ZkZ6xcfWN4fNTILUbq1yl1rYm+xi3hKJFTKncyG2cDcHS/h+SrZrhUu erD7aceLg2uHLiDp4B7K/2lX+dHEZmdTi0YJdYNkTtc2JY9rGTbg8HEc y8l0fboow8nyjdipDwvosiWwT/4sVwUrNxtHWFoXNZhPWN8hNvFStBeM aI38YWm01jo=
    tanzsportclub.at.       3600    IN      RRSIG   DNSKEY 13 2 3600 20210806082201 20210721082201 30946 tanzsportclub.at. 5+kE+QauaJuB/NJRPXZ5o2hpFkvaC11xHSIMjDEuXjxzPpwJOGKU0u1a tVyTeYRy+wOGeeICyqF6oAKGFoRDWQ==
    tanzsportclub.at.       3600    IN      RRSIG   DNSKEY 13 2 3600 20210806082201 20210721082201 39851 tanzsportclub.at. 5KG+72FhelOpJBp8xVYu4LhyayA2Hqc+ZRnuLGIH8PYhta+ASYjP/Yeg fxM4R4ZC8/EVfb1+01D+mSk78+PE1A==
    tanzsportclub.at.       0       IN      NSEC3PARAM 1 0 10 81A6D279E4C145B2
    tanzsportclub.at.       0       IN      RRSIG   NSEC3PARAM 7 2 0 20210806082201 20210721082201 55985 tanzsportclub.at. BiIKB/5E++9m/q8FIKcT++3xoyuu0RaB1X3FosyRIYuaBkFruLs1L4hb G198t37M+zLwJgHA35OOHIUQT2gN2NvkA/+aCNrBGTNoT6ePlKzKxmWU WEIebhvPYdyajhnESs2U24SLl8ApkUYEW+9Rx4X0WUAOuO6fWyiIW60k TDBJfvqlMMLOYBEA1G1O58ZUYGQKxhXQfu2k3hexj25UHd9ZKIsum4GO k4q6670SpANBZPfkASOUS3bycZq1coDE+5vqXEliUnumUtnpBhiySYYv KxplVu5L8bsOedld0vz+guDsKszA6oUEU6UAW5x6WJdSk7rrghEz/H0M 5oirlQ==
    tanzsportclub.at.       0       IN      RRSIG   NSEC3PARAM 13 2 0 20210806082201 20210721082201 39851 tanzsportclub.at. RLdFSkGhKTzhR2v6rwa1yJwG3KKwbeC1Jhxb0zvemRK/aQkcS3KB13lv j409eZWfRrlG+tgcC5PeBELLJhgVxg==
    
    ;; ADDITIONAL SECTION:
    mail.tanzsportclub.at.  3600    IN      A       18.194.39.152
    
    ;; Query time: 5 msec
    ;; SERVER: 2a01:4f8:1c1c:ca37::1#53(2a01:4f8:1c1c:ca37::1)
    ;; WHEN: Wed Jul 21 09:29:19 UTC 2021
    ;; MSG SIZE  rcvd: 5283
    It seems they do not correctly sync
    Maybe you have some ideas for me as I am not a pro in BIND thingys ;-)

    Greetz from Austria
    Dennis
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    If they do answer when querying from the same subnet, my first quess is firewall prevents public queries from reaching the servers.
    My signature has link to DNS tutorial with info on troubleshooting dns servers.
    Is the only difference between your two test outputs the display of DNSSEC information?
     
    ahrasis likes this.
  3. bitworx

    bitworx New Member

    Hi!

    Thanks for the fast reply.
    I think there is also a problem with the authoritative dns server.
    DNS requests are handled well from outside - so i dont think theres a firewall problem - or do you think its internal?

    I will look into your signature when I‘m home.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Restart bind on both servers and then check /var/log/syslog for errors regarding bind / named.
     
    Last edited: Jul 21, 2021
  5. bitworx

    bitworx New Member

    Hi Till!
    :edit
    I did as you advised and the problem seems to be gone.


    @Taleman
    I looked into your tut and I think I did nothing wrong so far, it already worked until a few days ago...
     
    Last edited: Jul 22, 2021

Share This Page