Yang Xiao wrote: <snip>
again, have you tried to use different DNS servers for queries and what is performance? where is the dig output from your current DNS server queries?
check for contrack use lsmod iptables -L -n will show you active iptables rule set
Yang
P.S can you send the /etc/nsswitch.conf and /etc/resolv.conf file?
Yang
/etc/nsswitch.conf and /etc/resolv.conf are attached.
Query times from the 4 servers in my resolv.conf, starting at the top:
;; Query time: 16 msec ;; SERVER: 68.48.0.6#53(ns02.rtchrd01.md.comcast.net) ;; WHEN: Thu Aug 5 19:32:25 2004 ;; MSG SIZE rcvd: 436
;; Query time: 25 msec ;; SERVER: 68.87.96.16#53(68.87.96.16) ;; WHEN: Thu Aug 5 19:34:26 2004 ;; MSG SIZE rcvd: 436
;; Query time: 18 msec ;; SERVER: 68.48.0.12#53(68.48.0.12) ;; WHEN: Thu Aug 5 19:34:56 2004 ;; MSG SIZE rcvd: 436
;; Query time: 25 msec ;; SERVER: 68.87.96.15#53(68.87.96.15) ;; WHEN: Thu Aug 5 19:35:09 2004 ;; MSG SIZE rcvd: 436
[bvitale@vandelay ~]$ /sbin/lsmod | grep conntrack [bvitale@vandelay ~]$
This makes sense, since I did not setup an iptables firewall.
Ben
; generated by /sbin/dhclient-script search alxndr01.va.comcast.net nameserver 68.48.0.6 nameserver 68.87.96.16 nameserver 68.48.0.12 nameserver 68.87.96.15
# # /etc/nsswitch.conf # # An example Name Service Switch config file. This file should be # sorted with the most-used services at the beginning. # # The entry '[NOTFOUND=return]' means that the search for an # entry should stop if the search in the previous entry turned # up nothing. Note that if the search failed due to some other reason # (like no NIS server responding) then the search continues with the # next entry. # # Legal entries are: # # nisplus or nis+ Use NIS+ (NIS version 3) # nis or yp Use NIS (NIS version 2), also called YP # dns Use DNS (Domain Name Service) # files Use the local files # db Use the local database (.db) files # compat Use NIS on compat mode # hesiod Use Hesiod for user lookups # [NOTFOUND=return] Stop searching if not found so far # # To use db, put the "db" in front of "files" for entries you want to be # looked up first in the databases # # Example: #passwd: db files nisplus nis #shadow: db files nisplus nis #group: db files nisplus nis passwd: files shadow: files group: files #hosts: db files nisplus nis dns hosts: files dns # Example - obey only what nisplus tells us... #services: nisplus [NOTFOUND=return] files #networks: nisplus [NOTFOUND=return] files #protocols: nisplus [NOTFOUND=return] files #rpc: nisplus [NOTFOUND=return] files #ethers: nisplus [NOTFOUND=return] files #netmasks: nisplus [NOTFOUND=return] files bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files netgroup: files publickey: nisplus automount: files aliases: files nisplus
