slow and failing dns queries - FC1 - bind-9.2.2.P3-9

[Götz Reinicke]

Hi,

we resently restarted our internetgateway and after that dns queries 
from our dns server are very slow and some faile completly. The gateway 
only got a new kernel, firewall rules aren't changed.

dig www.whatever.domain from the dns takes up to 5000 ms! after that, 
dig www.whatever.domain takes nearly nothing to be resolved.

ping from the firewall to a dns name takes very long, pinging the host 
directly works fine.

I have logged some output from bind and found lot of e.g.:

Mar 29 08:28:27.664 resolver: debug 1: createfetch: yahoo.fr AAAA
Mar 29 08:28:27.784 resolver: debug 1: createfetch: webdessl.ivwbox.de A
Mar 29 08:28:27.917 resolver: debug 1: createfetch: 
232.224.85.83.list.dsbl.org TXT
Mar 29 08:28:27.921 resolver: debug 1: createfetch: 
232.224.85.83.bl.spamcop.net TXT
Mar 29 08:28:28.336 resolver: debug 1: createfetch: pop3.web.de AAAA

Any ideas, why resolving takes so long or failes?


Regard

Götz Reinicke

-- 
Götz Reinicke
IT Koordinator - IT OfficeNet

Tel. +49 (0) 7141 - 969 420
Fax  +49 (0) 7141 - 969 55 420
goetz.reinicke at filmakademie.de

Filmakademie Baden-Württemberg
Mathildenstr. 20
71638 Ludwigsburg
www.filmakademie.de