[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Re (3): finding the ip address for dns, nslookup & etc.



On Sun, Aug 8, 2010 at 9:48 PM,  <peasthope@shaw.ca> wrote:
> From:   Tom H <tomh0665@gmail.co.>
> Date:   Sun, 08 Aug 2010 20:39:34 -0400
>
>> A "dig +trace debian.org" should display your upstream dns servers.
>
> That's helpful.  I also did "dig +trace google.ca";
> results appended.  Appears that dnsmasq referred to
> 192.33.4.12#53 and 193.0.14.129#53 upstream.

> joule:/home/peter# dig +trace debian.org
> ;; Received 449 bytes from 127.0.0.1#53(127.0.0.1) in 69 ms
> ;; Received 430 bytes from 192.33.4.12#53(c.root-servers.net) in 51 ms
> ;; Received 186 bytes from 199.19.53.1#53(c0.org.afilias-nst.info) in 168 ms
> ;; Received 262 bytes from 194.177.211.209#53(ns4.debian.com) in 255 ms

> joule:/home/peter# dig +trace google.ca
> ;; Received 449 bytes from 127.0.0.1#53(127.0.0.1) in 12 ms
> ;; Received 460 bytes from 193.0.14.129#53(k.root-servers.net) in 123 ms
> ;; Received 109 bytes from 192.228.30.9#53(e.ca-servers.ca) in 82 ms
> ;; Received 123 bytes from 216.239.32.10#53(ns1.google.com) in 86 ms

Unfortunately it wasn't helpful. I thought that the first query in the
trace would return the upstream servers and not 127.0.0.1...

The two ip addresses with #53 appended are definitely not your
upstream dns servers.


> Incidentally, what is  the "search domain", "pi.shawcable.net"
> in this case?

It's your ISP's search domain.


> Another observation: since a security update of the
> Lenny system, about a month back, it doesn't know
> its own name.
> peter@joule:~$ telnet joule
> telnet: could not resolve joule/telnet: Name or service not known
> peter@joule:~$
> Whereas "telnet localhost" works.  Appears that
> the security broke something.

Check /etc/hosts


> I'm thinking of purging and reinstalling some
> packages, beginning with dnsmasq. Does anyone
> have a better idea?

Why did you install it?


Check /var/log/syslog. There'll be entries for dnsmaq where it reads
the upstream servers.

You can also enable logging in /etc/dnsmasq.conf, restart dnsmasq, and
cjeck /var/log/syslog for the upstream servers.

I suspect that the ip addresses that you're looking for are:
204.209.208.5 and 64.59.135.214.


Reply to: