Re: bind9, openswan crashes wheezy VPS
On Mon, Aug 12, 2013 at 08:33:14PM -0600, Bob Proulx wrote:
> I don't know but for example DNS will start off with a UDP query. But
> if the response is too large for a single UDP packet then it will
> change to a TCP connection for the larger data exchange. So let's say
> that UDP always works okay and it is only something about TCP that is
> problematic. Then you could definitely find issues with some domain
> names and not others if those problematic ones used TCP due to a
> larger amount of data. Such as if some have many more records than
> others.
>
> You might compare the sizes of the returned data in a dns query and
> see if there is a correlation. 'dig' should give you that
> information. But I am not saying that is the problem. Just saying
> that there will be differences in how the lookups are handled.
Interesting you mention that. I've transferred stuff over ftp/http/ssh
up/down with no problem. On the other hand, as you point out, bind9
uses udp for queries initially, and openswan uses udp as well. I went
ahead and contacted my VPS provider's support, since there doesn't
seem to be much more I can do here on my own. So, we'll see what
finally fixes things. I'll post back here when that happens to close
this out. One more thing I forgot to mention here is that back when
bind9 was causing the machine to crash at boot, I brought down the
eth0 interface, and was able to stop/start bind9 as much as I wanted
without problems. So, it could very well be something with the
virtio_net module. Will be interesting to see what solves this.
>
> BTW... What do you have in /etc/nsswitch.conf? Hope it just says
> "files dns" there.
>
> $ grep hosts /etc/nsswitch.conf
> hosts: files dns
>
I didn't touch that, so it is whatever wheezy installed by
default. Yes, when I run grep like you show above, I get back exactly
what you did. It has other lines in there, so the whole file doesn't
just say
hosts: files dns
all by itself. So, I assume you're asking if that one line just says
hosts: files dns, not that the entire file consists of that,
and only that. If that is the intended question, the answer is
yes. Thanks again for your help Bob.
Greg
--
web site: http://www.gregn..net
gpg public key: http://www.gregn..net/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)
--
Free domains: http://www.eu.org/ or mail dns-manager@EU.org
Reply to: