[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: bind9, openswan crashes wheezy VPS

On Mon, Aug 12, 2013 at 08:33:14PM -0600, Bob Proulx wrote:
> I don't know but for example DNS will start off with a UDP query.  But
> if the response is too large for a single UDP packet then it will
> change to a TCP connection for the larger data exchange.  So let's say
> that UDP always works okay and it is only something about TCP that is
> problematic.  Then you could definitely find issues with some domain
> names and not others if those problematic ones used TCP due to a
> larger amount of data.  Such as if some have many more records than
> others.
> You might compare the sizes of the returned data in a dns query and
> see if there is a correlation.  'dig' should give you that
> information.  But I am not saying that is the problem.  Just saying
> that there will be differences in how the lookups are handled.

Interesting you mention that. I've transferred stuff over ftp/http/ssh
up/down with no problem. On the other hand, as you point out, bind9
uses udp for queries initially, and openswan uses udp as well. I went
ahead and contacted my VPS provider's support, since there doesn't
seem to be much more I can do here on my own. So, we'll see what
finally fixes things. I'll post back here when that happens to close
this out. One more thing I forgot to mention here is that back when
bind9 was causing the machine to crash at boot, I brought down the
eth0 interface, and was able to stop/start bind9 as much as I wanted
without problems. So, it could very well be something with the
virtio_net module. Will be interesting to see what solves this.

> BTW...  What do you have in /etc/nsswitch.conf?  Hope it just says
> "files dns" there.
>   $ grep hosts /etc/nsswitch.conf
>   hosts:          files dns

I didn't touch that, so it is whatever wheezy installed by
default. Yes, when I run grep like you show above, I get back exactly
what you did. It has other lines in there, so the whole file doesn't
just say 

hosts:          files dns

all by itself. So, I assume you're asking if that one line just says
hosts:          files dns, not that the entire file consists of that,
and only that. If that is the intended question, the answer is
yes. Thanks again for your help Bob.


web site: http://www.gregn..net
gpg public key: http://www.gregn..net/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)

Free domains: http://www.eu.org/ or mail dns-manager@EU.org

Reply to: