RE: Too long a domain name

On Mon, 2 Aug 1999, Mike Batchelor wrote:

MB} > -----Original Message-----
MB} > From: Merton Campbell Crockett [mailto:mcc@WLV.IIPO.GTEGSC.COM]
MB} > Sent: Monday, August 02, 1999 2:48 PM
MB} > To: Mike Batchelor
MB} > Cc: Jens-S. Voeckler; squid-users@ircache.net
MB} > Subject: RE: Too long a domain name
MB} >
MB} > Which version of BIND and its resolver routines are you running on your
MB} > Solaris and Irix systems?
MB}
MB} BIND 8.1.1 on all of them, but using the system resolver to link programs,
MB} like squid.
MB}
MB} I've also found that "ping" and "telnet" from the Irix host cannot resolve the
MB} hostname, so it seems to be a Irix bug. I also found that the Gauntlet
MB} http-gw has the same problem if I use it explicitly, rather than in
MB} transparent mode. Trans mode never needs to resolve the IP, since it only
MB} sees the IP dest in the TCP header. The browser has already resolved it, you
MB} know.
MB}
MB} That pretty much nails it to the Irix 6.4 system resolver. I will try to link
MB} squid against the BIND 8 resolver libs, and will report the bug to SGI.
MB} Thanks for the comments, they did help me isolate the culprit.

Glad to help. I vaguely remembered an issue with both Irix and Solaris
but couldn't recall the versions affected. CERT, CIAC, and FedCIRC had
incidents involving BIND and resolver routines for both OSes.

                             Merton Campbell Crockett
+---------------------------------------------------------------------------+
| Manager, Network Operations & Services | Senior Network/Security Engineer |
| GTE Government Systems Corporation | Naval Surface Warfare Center |
| Electronic Systems Division | Port Hueneme Division |
| Intelligence Systems Organization | IT/TIS Program |
| Thousand Oaks, CA | Port Hueneme, CA |
+---------------------------------------------------------------------------+
Received on Mon Aug 02 1999 - 21:16:29 MDT