🚀 go-pugleaf

Hi --

I recently upgraded my DNS from named 8.1.1 to 8.1.2-T3B.  Everything
works, except nslookup.  nslookup hangs and named puts the following record
in syslog:

Apr 14 16:21:47 moat.pweh.com named[2241]: refused query on non-query socket from [my.ip.address].59246

My named.conf file (not changed from 8.1.1) is below.

I also know that if I comment out the 'query-source' option, nslookup
resolves locally, but the routers block outbound requests.

I'm sure I need to modify an option, but can't figure out what.


Thanks for any help.


-->BoB Miorelli, Pratt & Whitney
miorelli@pweh.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
In theory, theory and practice are the same; 
in practice they are distinct.


---------------------- named.conf --------------------------------------
options {
	directory "/var/named";
	allow-transfer {
		my.dns.secondary;
	};

	/*
	 * If there is a firewall between you and nameservers you want
	 * to talk to, you might need to uncomment the query-source
	 * directive below.  Previous versions of BIND always asked
	 * questions using port 53, but BIND 8.1 uses an unprivileged
	 * port by default.
	 */

	// uncommented -- router may block it otherwise
	query-source address * port 53;
};

zone "0.0.127.IN-ADDR.ARPA" {
	type master;
	file "localhost.in-addr.127.0.0";
};

zone "pweh.com" {
	type master;
	file "pweh.com";
};

zone "pratt-whitney.com" {
	type master;
	file "pratt-whitney.com";
};

zone "prattwhitney.com" {
	type master;
	file "prattwhitney.com";
};

zone "250.54.192.in-addr.arpa" {
	type master;
	file "pweh.in-addr.192.54.250";
};

zone "." {
	type hint;
	file "root-nameservers";
};