nsd users - Oct 2023 - Cannot reach server from outside

Tried with ip-address option, it is not working.

I think ip-address binds to local ip address. Anyways localhost binds to the
same ip as that of http, 0.0.0.0 , so everything is right from the system.

How do I test udp from other network as dig tests over udp. Or can I dig over
tcp?

Thanking you
Sagar Acharya

P.S. @Anand, chup hojaa. Bhauk mat.

On 4 October 2023 6:58:25 pm IST, Jeroen Koekkoek <jeroen at nlnetlabs.nl>
wrote:
>Hi Sagar,
>
>It's hard to say what the problem is without knowing the type of error,
>but since it works from localhost, I'm assuming NSD successfully loads
>the zone etc.
>
>If you've not specified any address, by default NSD listens on all
>interfaces. In that case chances are the firewall is blocking traffic.
>It may also be that NSD is not listening on the specified address, in
>that case please add the proper "ip-address" option to nsd.conf.
>
>Best regards,
>Jeroen Koekkoek
>
>
>On Wed, 2023-10-04 at 12:34 +0530, Sagar Acharya via nsd-users wrote:
>> Dear folks,
>> 
>> 
>> I am unable to
>> 
>> dig humaaraartha.in @103.236.115.116
>> 
>> from outside. From the host itself,
>> 
>> dig humaaraartha.in @localhost
>> 
>> works.
>> 
>> You can browse the website at http://103.236.115.116
>> 
>> Kindly cc me as I am not subscribed.
>> 
>> 
>> Thanking you
>> Sagar Acharya
>> _______________________________________________
>> nsd-users mailing list
>> nsd-users at lists.nlnetlabs.nl
>> https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20231004/816ec95f/attachment.htm>

On 04/10/2023 17:25, Sagar Acharya via nsd-users wrote:
> How do I test udp from other network as dig tests over udp. Or can I
> dig over tcp?
Have you bothered reading the man page of dig with "man dig"? If you 
had, you'd know whether you can use tcp or not.

But you just want to be spoon-fed answers. That's a rather lazy attitude.

On 2023/10/04 20:55, Sagar Acharya via nsd-users wrote:
> Tried with ip-address option, it is not working.
> 
> I think ip-address binds to local ip address. Anyways localhost binds to
the same ip as that of
> http, 0.0.0.0 , so everything is right from the system.
If your host has multiple addresses, binding to 0.0.0.0 will often
not do what you want for UDP. The source address of responses will
not necessarily be the same address as the query was sent to.
This is also described in the nsd.conf(5) manual in the description
of the "ip-address" option.

I suggest listing the specific IP addresses on which NSD will be
sent DNS queries.

Also use e.g. tcpdump to check that the queries are actually received
at your machine and not filtered upstream.
> How do I test udp from other network as dig tests over udp. Or can I dig
over tcp?
"dig +tcp" will use TCP for the test, but TCP does not have the above
problem on multi-homed hosts.