Community discussions

MikroTik App
 
alex998r
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Sun Jan 07, 2007 10:54 pm
Contact:

Static DNS failure

Tue Sep 25, 2007 1:38 pm

Hello I have a problem with static DNS.
I am running ROS 2.9.43 on a dedicated AMD based PC.
I have in my internal network a Linux Debian mailserver ( Postfix ) and I wish my clients connect to it with it's name.
I had put a static DNS entry, this is the output:

[alex@badde1_pc] ip dns static> pr
Flags: D - dynamic
# NAME ADDRESS TTL
0 mailserv 10.5.50.252 1d
1 dnsbadde 10.5.50.1 1d

so my clients should insert MAILSERV as the SMTP out, buth this is not functioning.
If I try to ping MAILSERV it fails
The NSLOOKUP command gives this output:
SERVER: DNSBADDE
ADDRESS: 10.5.50.1


NAME: MAILSERV
ADDRESS: 10.5.50.252

So it seems that NSLOOKUP correctly finds the name-address association; but http or SMTP not.
I tryed also a: telnet mailserv
no success also with this command.
My DNS settings are:
[alex@badde1_pc] ip dns> pr
primary-dns: 62.211.69.150
secondary-dns: 0.0.0.0
allow-remote-requests: yes
cache-size: 2048KiB
cache-max-ttl: 1w
cache-used: 1368KiB

Please has someone some suggestion?
Do I missed something in the configuration?
Many thanks for your help
Regards
Alessandro
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: Static DNS failure

Tue Sep 25, 2007 3:05 pm

You should have redirect rules, that ensures that all clients use router DNS cache.
Like this,
'ip firewall nat add action=redirect dst-port=53 protocol=tcp chain=dstnat to-ports=53', the same for UDP protocol.
 
alex998r
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Sun Jan 07, 2007 10:54 pm
Contact:

Re: Static DNS failure

Tue Sep 25, 2007 10:55 pm

Hi Segejs, many thanks for your help.
unfortunately on the same MT box I am running a hotspot service, thus I have two dynamic rules added
by HS; they are:

2 D chain=hotspot protocol=udp dst-port=53 action=redirect to-ports=64872

3 D chain=hotspot protocol=tcp dst-port=53 action=redirect to-ports=64872

Are they needed?
Can I put the two suggested rules on top of these to intercept port 53 requests before the other above mentioned two?

many thanks for your help
Regards
Alessandro
 
alex998r
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Sun Jan 07, 2007 10:54 pm
Contact:

Re: Static DNS failure

Wed Sep 26, 2007 11:04 am

Hi please anyone can explain the above problem?
I tryed by myself to put the NAT rules on top of the chain but the clients stopped to surf the internet
Many thanks
Alessandro
 
JR
Member Candidate
Member Candidate
Posts: 120
Joined: Tue Nov 08, 2005 3:27 am

Re: Static DNS failure

Thu Sep 27, 2007 6:20 pm

the same problem exsits with rc1, i.e. it DOES NOT work with keywords ONLY!
e.g. mailserv

If i try to ftp://mailserv and login - it says after a long time cannot get content,
even though the logs on MT shows a ftp user has logged in.

The only way around this is [.] in the keyword - e.g mailserv.linux or mail.serv

:?
 
alex998r
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 96
Joined: Sun Jan 07, 2007 10:54 pm
Contact:

Re: Static DNS failure

Fri Sep 28, 2007 10:51 am

Hi JR, many thanks for your help.
Now it works, great
Regards
Alessandro
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6695
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: Static DNS failure

Tue Oct 02, 2007 2:02 pm

These rules are created by HotSpot, HotSpot is taking DNS requests to itself, then use settings from 'ip dns'.
2 D chain=hotspot protocol=udp dst-port=53 action=redirect to-ports=64872
3 D chain=hotspot protocol=tcp dst-port=53 action=redirect to-ports=64872
 
JR
Member Candidate
Member Candidate
Posts: 120
Joined: Tue Nov 08, 2005 3:27 am

Re: Static DNS failure

Thu Oct 04, 2007 8:04 pm

Hi JR, many thanks for your help.
Now it works, great
Regards
Alessandro
Sergejs - could you kindly explain this, thanks.
I really would like to use single keywords.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: Static DNS failure

Sat Oct 06, 2007 2:31 am

so my clients should insert MAILSERV as the SMTP out, buth this is not functioning.
try "MAILSERV." (with dot) on clients - it seems like it's working =)

Who is online

Users browsing this forum: No registered users and 41 guests