On Sun, Dec 06, 2009 at 04:08:11PM -0800, Andrew Sackville-West wrote: > On Mon, Dec 07, 2009 at 01:56:06AM +0200, Andrei Popescu wrote: > > On Sun,06.Dec.09, 15:39:59, Andrew Sackville-West wrote: > > > > > > there are clearly some differences. the lenny machine is making a > > > AAAA? request (whatever that means) while the squeeze machine is > > > making both a A? and AAAA? requests. And the responses are different. > > > This behavior is consistent across attempts. > > > > This sounds like an ipv4/ipv6 issue. Maybe this NEWS.Debian entry for > > libc6 has the solution: > > > > glibc (2.9-8) unstable; urgency=low > > > > Starting with version 2.9-8, unified IPv4/IPv6 lookup have been enabled > > in the glibc's resolver. This is faster, fixes numerous of bugs, but is > > problematic on some broken DNS servers and/or wrongly configured > > firewalls. > > > > If such a DNS server is detected, the resolver switches (permanently > > for that process) to a mode where the second request is sent only when > > the first answer has been received. This means the first request will > > be timeout, but subsequent requests should be fast again. This > > behaviour can be enabled permanently by adding 'options single-request' > > to /etc/resolv.conf. > > Andrei, I owe you a beer! > > That's done it right there. Now it's just a matter of figuring out > whether it's my firewall or my dns server that's broken... :) blech... it's my firewall, or several public dns servers are broken... A
Attachment:
signature.asc
Description: Digital signature