Problems with dns
I rebooted the server now snort doesnt resolve to anything i dont see any errors in any of my logs. anyone have any ideas?
2 Replies
mwalling@you ~$ dig snort.evilputty.com
; <<>> DiG 9.4.1-P1 <<>> snort.evilputty.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53344
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;snort.evilputty.com. IN A
;; ANSWER SECTION:
snort.evilputty.com. 3537 IN CNAME pengu.
;; AUTHORITY SECTION:
. 10738 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.com. 2008041301 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Apr 14 11:43:17 2008
;; MSG SIZE rcvd: 128
mwalling@you ~$ dig pengu.
; <<>> DiG 9.4.1-P1 <<>> pengu.
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;pengu. IN A
;; AUTHORITY SECTION:
. 10734 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2008041301 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Apr 14 11:43:21 2008
;; MSG SIZE rcvd: 98
````
The problem isn't that snort.evilputty.com doesnt resolve, its that your CNAME points to pengu., not pengu.evilputty.com.