On Wed, Jul 23, 2008 at 12:07:06AM -0700, Keith Lofstrom wrote:
> 
> There was a flurry of upgrades to BIND/named about a week ago.  Over
> the last few days, I have noticed a few DNS failures (but that may
> be coincidental).  I am learning to read debug output and developing
> a better understanding of named.conf (set up by a consultant 5 years
> ago) and so on, but meanwhile, is anyone else having problems?
> 
> Try "dig ns1.hostica.com +trace" and see if it fails.
> 
> Keith

In my case, it turned out to me a couple of things.  The DNS UDP
packets seem to be a bit longer now.  I am currently connected to
Verizon FIOS through an Actiontec cable modem/router, which some
websites say truncates UDP packets to 512 bytes, in accordance
with RFC negative 666. :-)  That caused problems with hostica
and others.   I changed /etc/named.conf to a policy of forward
first, and used the Verizon nameservers as forwarders, taking out
the lookup through the root nameservers.  Verizon does some goofy
things with nonexistent URLs, but I can live with that for now.

Keith

-- 
Keith Lofstrom          [log in to unmask]         Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs