<div dir="ltr"><br><div>Ok, I took a random shot in the dark. I commented out one line:</div><div><br></div><div><span style="font-family:monospace"> query-source address * port 53;<br></span></div><div><br></div><div>A quick google found this: <a href="http://www.mpipks-dresden.mpg.de/~mueller/docs/suse10.1/suselinux-manual_en/manual/sec.dns.named.html">http://www.mpipks-dresden.mpg.de/~mueller/docs/suse10.1/suselinux-manual_en/manual/sec.dns.named.html</a><br></div><div><br></div><div>I likely had this from back when Comcast was being a PITA when I first set up here in Colorado. As soon as I commented out and reloaded, it's working...</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Jun 30, 2016 at 2:33 PM Robert L. Harris <<a href="mailto:robert.l.harris@gmail.com">robert.l.harris@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div>Yes, if I dig with the cname tag it does resolve:</div><div><span style="font-family:monospace">{0}:/home/nomad/Dropbox/Charter>dig cname <a href="http://www.dropbox.com" target="_blank">www.dropbox.com</a>
<br>
<br>; <<>> DiG 9.10.3-P4-Ubuntu <<>> cname <a href="http://www.dropbox.com" target="_blank">www.dropbox.com</a>
<br></span></div></div><div dir="ltr"><div><span style="font-family:monospace">;; global options: +cmd
<br>;; Got answer:
<br></span></div></div><div dir="ltr"><div><span style="font-family:monospace">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9120
<br>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 5
<br></span></div></div><div dir="ltr"><div><span style="font-family:monospace">
<br>;; OPT PSEUDOSECTION:
<br>; EDNS: version: 0, flags:; udp: 4096
<br>;; QUESTION SECTION:
<br></span></div></div><div dir="ltr"><div><span style="font-family:monospace">;<a href="http://www.dropbox.com" target="_blank">www.dropbox.com</a>. IN CNAME
<br>
<br>;; ANSWER SECTION:
<br></span></div></div><div dir="ltr"><div><span style="font-family:monospace"><a href="http://www.dropbox.com" target="_blank">www.dropbox.com</a>. 60 IN CNAME <a href="http://www.g1.dropbox.com" target="_blank">www.g1.dropbox.com</a>.
<br>
<br>;; AUTHORITY SECTION:
<br><a href="http://dropbox.com" target="_blank">dropbox.com</a>. 171748 IN NS <a href="http://ns-1949.awsdns-51.co.uk" target="_blank">ns-1949.awsdns-51.co.uk</a>.
<br><a href="http://dropbox.com" target="_blank">dropbox.com</a>. 171748 IN NS <a href="http://ns-315.awsdns-39.com" target="_blank">ns-315.awsdns-39.com</a>.
<br><a href="http://dropbox.com" target="_blank">dropbox.com</a>. 171748 IN NS <a href="http://ns-564.awsdns-06.net" target="_blank">ns-564.awsdns-06.net</a>.
<br><a href="http://dropbox.com" target="_blank">dropbox.com</a>. 171748 IN NS <a href="http://ns-1162.awsdns-17.org" target="_blank">ns-1162.awsdns-17.org</a>.
<br>
<br>;; ADDITIONAL SECTION:
<br><a href="http://ns-315.awsdns-39.com" target="_blank">ns-315.awsdns-39.com</a>. 172734 IN A 205.251.193.59
<br><a href="http://ns-564.awsdns-06.net" target="_blank">ns-564.awsdns-06.net</a>. 171748 IN A 205.251.194.52
<br><a href="http://ns-1162.awsdns-17.org" target="_blank">ns-1162.awsdns-17.org</a>. 171748 IN A 205.251.196.138
<br><a href="http://ns-1949.awsdns-51.co.uk" target="_blank">ns-1949.awsdns-51.co.uk</a>. 171749 IN A 205.251.199.157
<br>
<br>;; Query time: 129 msec
<br>;; SERVER: 172.20.0.1#53(172.20.0.1)
<br>;; WHEN: Thu Jun 30 14:30:48 MDT 2016
<br>;; MSG SIZE rcvd: 266
<br>
<br><br>
<br></span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">I ran another test with a trace and got this:</span></div><div><font face="monospace"><span style="font-size:10.5625px;line-height:15.8438px"><a href="http://pastebin.com/uFMvtZhd" target="_blank">http://pastebin.com/uFMvtZhd</a></span></font><br></div><div><font face="monospace"><span style="font-size:10.5625px;line-height:15.8438px"><br></span></font></div></div><br><div class="gmail_quote"><div dir="ltr">On Thu, Jun 30, 2016 at 2:21 PM Scott M. Jones <<a href="mailto:eff@dragoncon.org" target="_blank">eff@dragoncon.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a> is a cname. Have you tried<br>
<br>
dig cname <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a><br>
<br>
???<br>
<br>
scott$ dig cname <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a><br>
<br>
; <<>> DiG 9.8.3-P1 <<>> cname <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a><br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15281<br>
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0<br>
<br>
;; QUESTION SECTION:<br>
;<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a>. IN CNAME<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a>. 55 IN CNAME <a href="http://www.g1.dropbox.com" rel="noreferrer" target="_blank">www.g1.dropbox.com</a>.<br>
<br>
;; Query time: 42 msec<br>
;; SERVER: 192.168.3.254#53(192.168.3.254)<br>
;; WHEN: Thu Jun 30 16:13:38 2016<br>
;; MSG SIZE rcvd: 54<br>
<br>
<br>
<br>
On 6/30/16 3:18 PM, Robert L. Harris wrote:<br>
><br>
> Ok, I know I'm missing something odd here. I can look up <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a><br>
> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>> but not <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a> <<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">http://www.dropbox.com</a>>.<br>
> It looks like I'm getting a "refused" response from my server. If I do<br>
> the dig against localhost from the server, I get the exact same<br>
> results. I've tried enabling recursion {any;} same with listen ( and<br>
> both of their -on values ).<br>
><br>
> {0}:/etc/bind>dig <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>><br>
><br>
> ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1729<br>
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 5<br>
><br>
> ;; OPT PSEUDOSECTION:<br>
> ; EDNS: version: 0, flags:; udp: 4096<br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. IN A<br>
><br>
> ;; ANSWER SECTION:<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 60 IN A<br>
> 108.160.172.238<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 60 IN A<br>
> 108.160.172.206<br>
><br>
> ;; AUTHORITY SECTION:<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 172535 IN NS<br>
> <a href="http://ns-315.awsdns-39.com" rel="noreferrer" target="_blank">ns-315.awsdns-39.com</a> <<a href="http://ns-315.awsdns-39.com" rel="noreferrer" target="_blank">http://ns-315.awsdns-39.com</a>>.<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 172535 IN NS<br>
> <a href="http://ns-564.awsdns-06.net" rel="noreferrer" target="_blank">ns-564.awsdns-06.net</a> <<a href="http://ns-564.awsdns-06.net" rel="noreferrer" target="_blank">http://ns-564.awsdns-06.net</a>>.<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 172535 IN NS<br>
> <a href="http://ns-1162.awsdns-17.org" rel="noreferrer" target="_blank">ns-1162.awsdns-17.org</a> <<a href="http://ns-1162.awsdns-17.org" rel="noreferrer" target="_blank">http://ns-1162.awsdns-17.org</a>>.<br>
> <a href="http://dropbox.com" rel="noreferrer" target="_blank">dropbox.com</a> <<a href="http://dropbox.com" rel="noreferrer" target="_blank">http://dropbox.com</a>>. 172535 IN NS<br>
> <a href="http://ns-1949.awsdns-51.co.uk" rel="noreferrer" target="_blank">ns-1949.awsdns-51.co.uk</a> <<a href="http://ns-1949.awsdns-51.co.uk" rel="noreferrer" target="_blank">http://ns-1949.awsdns-51.co.uk</a>>.<br>
><br>
> ;; ADDITIONAL SECTION:<br>
> <a href="http://ns-315.awsdns-39.com" rel="noreferrer" target="_blank">ns-315.awsdns-39.com</a> <<a href="http://ns-315.awsdns-39.com" rel="noreferrer" target="_blank">http://ns-315.awsdns-39.com</a>>. 172535 IN A<br>
> 205.251.193.59<br>
> <a href="http://ns-564.awsdns-06.net" rel="noreferrer" target="_blank">ns-564.awsdns-06.net</a> <<a href="http://ns-564.awsdns-06.net" rel="noreferrer" target="_blank">http://ns-564.awsdns-06.net</a>>. 172536 IN A<br>
> 205.251.194.52<br>
> <a href="http://ns-1162.awsdns-17.org" rel="noreferrer" target="_blank">ns-1162.awsdns-17.org</a> <<a href="http://ns-1162.awsdns-17.org" rel="noreferrer" target="_blank">http://ns-1162.awsdns-17.org</a>>. 172536 IN A<br>
> 205.251.196.138<br>
> <a href="http://ns-1949.awsdns-51.co.uk" rel="noreferrer" target="_blank">ns-1949.awsdns-51.co.uk</a> <<a href="http://ns-1949.awsdns-51.co.uk" rel="noreferrer" target="_blank">http://ns-1949.awsdns-51.co.uk</a>>. 172536 IN<br>
> A 205.251.199.157<br>
><br>
> ;; Query time: 40 msec<br>
> ;; SERVER: 172.20.0.1#53(172.20.0.1)<br>
> ;; WHEN: Thu Jun 30 13:16:37 MDT 2016<br>
> ;; MSG SIZE rcvd: 273<br>
><br>
><br>
> {0}:/etc/bind>dig <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a> <<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">http://www.dropbox.com</a>><br>
><br>
> ; <<>> DiG 9.9.5-3ubuntu0.8-Ubuntu <<>> <a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a><br>
> <<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">http://www.dropbox.com</a>><br>
> ;; global options: +cmd<br>
> ;; Got answer:<br>
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 1539<br>
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<br>
><br>
> ;; OPT PSEUDOSECTION:<br>
> ; EDNS: version: 0, flags:; udp: 4096<br>
> ;; QUESTION SECTION:<br>
> ;<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">www.dropbox.com</a> <<a href="http://www.dropbox.com" rel="noreferrer" target="_blank">http://www.dropbox.com</a>>. IN A<br>
><br>
> ;; Query time: 48 msec<br>
> ;; SERVER: 172.20.0.1#53(172.20.0.1)<br>
> ;; WHEN: Thu Jun 30 13:16:42 MDT 2016<br>
> ;; MSG SIZE rcvd: 44<br>
><br>
><br>
> Thoughts?<br>
><br>
><br>
><br>
> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div></blockquote></div>