From wolfmanfr at gmail.com Tue Jan 5 17:04:01 2010 From: wolfmanfr at gmail.com (Daniel C.) Date: Tue, 5 Jan 2010 23:04:01 +0100 Subject: Status argument in /etc/init.d/maradns doesn't exist Message-ID: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> Hello, I would use MaraDns with Hearbeat2 but Maradns doesn't had a status information in /etc/init.d/maradns, just the args. start|stop|reload Could you help me ? Best regards, PS : Sorry for my bad english From TmBergMAIL at starka.st Tue Jan 5 15:30:15 2010 From: TmBergMAIL at starka.st (Thomas) Date: Tue, 05 Jan 2010 21:30:15 +0100 Subject: AAAA-records... Message-ID: <4B43A157.3020601@starka.st> Hello, im trying to set up an aaaa-record but ive had no success no matter what i do. I have gotten reverse to work with: P1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.8.1.0.8.2.0.0.0.7.4.0.1.0.0.2.ip6.arpa.|86400|ipv6.starka.st. But AAAA is a no go So.. Does anyone have a working AAAA-record example for me? Some of the things ive tried: * AAAAipv6.starka.st.|86400|2001:470:28:183::1. * ipv6.starka.st. +64000 AAAA 2001:470:28:183::1 Or have ive gotten it completly wrong? Using Debian-version 1.3.07.09-3 Tia /Thomas -- http://mail.signature.starka.st/ From strenholme.usenet at gmail.com Tue Jan 5 20:49:38 2010 From: strenholme.usenet at gmail.com (Sam Trenholme) Date: Tue, 5 Jan 2010 19:49:38 -0600 Subject: AAAA-records... In-Reply-To: <4B43A157.3020601@starka.st> References: <4B43A157.3020601@starka.st> Message-ID: <7bd685721001051749k1fffc6d1n7429166b10597900@mail.gmail.com> > Hello, im trying to set up an aaaa-record but ive had no success no matter > what i do. Use csv2 zone files, not csv1 zone files. csv1 zone files are deprecated and are only supported to ease transition for people who used to use MaraDNS 1.0. MaraDNS includes a Perl script to convert csv1 zone files in to csv2 zone files and has supported csv2 zone files since MaraDNS 1.2, released over four years ago. csv2 zone files support AAAA records, as well as SRV records and all sorts of obscure record types (LOC, NAPTR, etc.). - Sam Note: I do not answer MaraDNS support requests sent by private email without being compensated for my time. A MaraDNS support request is any and all discussion you may wish to have about MaraDNS in private email; if you want to email me to talk about MaraDNS then, yes, that is a support request. I will discuss rates if you want this kind of support. Thank you for your understanding. MaraDNS security vulnerability reports, however, will be dealt with without charge and kept confidential. If you don't know what Bugtraq is, then, no, your email is not a security report. From remco at webconquest.com Tue Jan 5 22:06:42 2010 From: remco at webconquest.com (Remco Rijnders) Date: Wed, 06 Jan 2010 04:06:42 +0100 Subject: AAAA-records... In-Reply-To: <4B43A157.3020601@starka.st> References: <4B43A157.3020601@starka.st> Message-ID: <4B43FE42.8040900@webconquest.com> Thomas schreef: > Hello, im trying to set up an aaaa-record but ive had no success no > matter what i do. > > I have gotten reverse to work with: > P1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.8.1.0.8.2.0.0.0.7.4.0.1.0.0.2.ip6.arpa.|86400|ipv6.starka.st. > > > But AAAA is a no go > > So.. Does anyone have a working AAAA-record example for me? > > Some of the things ive tried: > > * AAAAipv6.starka.st.|86400|2001:470:28:183::1. > * ipv6.starka.st. +64000 AAAA 2001:470:28:183::1 > > Or have ive gotten it completly wrong? Hi Thomas, In addition to what Sam wrote, once you have a csv2 file up, getting an AAAA record in is as simple as adding a line like: lappy.% AAAA 2001:888:1083::3192:2277:12ef:76eb For your example and assuming a zone file for starka.st, it would be: ipv6.% AAAA 2001:470:28:183::1 Kind regards, Remco From strenholme.usenet at gmail.com Wed Jan 6 11:04:30 2010 From: strenholme.usenet at gmail.com (Sam Trenholme) Date: Wed, 6 Jan 2010 10:04:30 -0600 Subject: Status argument in /etc/init.d/maradns doesn't exist In-Reply-To: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> References: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> Message-ID: <7bd685721001060804p7c417ba7n945bb1f1570518f5@mail.gmail.com> > I would use MaraDns with Hearbeat2 but Maradns doesn't had a status > information in /etc/init.d/maradns, just the args. start|stop|reload Hmm...so Heartbeat2 is incapable of looking at a process list and determining if a given process is running? Looks like it; a glance at http://people.linbit.com/~florian/heartbeat-users-guide/ doesn?t show anything to contradict this. > Could you help me ? Updating mara.startup to support the ?status? command is something I will not do without being compensated for my time ? this is a feature request, not a bug report. My fee to add this feature to MaraDNS is $100. If you do not wish to pay this fee, feel free to submit a patch implementing this feature to the MaraDNS mailing list. - Sam Note: I do not answer MaraDNS support requests sent by private email without being compensated for my time. A MaraDNS support request is any and all discussion you may wish to have about MaraDNS in private email; if you want to email me to talk about MaraDNS then, yes, that is a support request. I will discuss rates if you want this kind of support. Thank you for your understanding. MaraDNS security vulnerability reports, however, will be dealt with without charge and kept confidential. If you don't know what Bugtraq is, then, no, your email is not a security report. From cristian.grigoriu at provus.ro Wed Jan 6 11:24:12 2010 From: cristian.grigoriu at provus.ro (Cristian Grigoriu) Date: Wed, 06 Jan 2010 18:24:12 +0200 Subject: Status argument in /etc/init.d/maradns doesn't exist In-Reply-To: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> References: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> Message-ID: <4B44B92C.8080108@provus.ro> Hi, > I would use MaraDns with Hearbeat2 but Maradns doesn't had a status > information in /etc/init.d/maradns, just the args. start|stop|reload > > Could you help me ? You did not specified the host OS. I'll assume you're running a LSB compliant Linux distribution. First include LSB init functions by insertinf this line at the beginning of your /etc/init.d/maradns script: . /lib/lsb/init-functions Then in your case statement: case "$1" in start) ... stop) ... status) status_of_proc -p /var/run/maradns.pid /usr/sbin/maradns maradns ;; esac > Best regards, > > PS : Sorry for my bad english HTH, Cristian GRIGORIU From jakob.blomer at cern.ch Mon Jan 11 08:32:42 2010 From: jakob.blomer at cern.ch (Jakob Blomer) Date: Mon, 11 Jan 2010 14:32:42 +0100 Subject: Delivery of non-cached replies In-Reply-To: <4ADF7EA6.3050203@cern.ch> References: <4ADEFC42.2050802@cern.ch> <7bd685720910210652w771e35f3n126454842a114f21@mail.gmail.com> <4ADF4746.8080107@cern.ch> <7bd685720910211208redd7e56yb1652ec0e8f80538@mail.gmail.com> <4ADF7EA6.3050203@cern.ch> Message-ID: <4B4B287A.8030602@cern.ch> Hi, after quite some time of chasing (CernVM) bugs and postponing releases, I finally made deadwood part of the CernVM appliance: http://rbuilder.cern.ch/search?type=Packages&search=deadwood Cheers, Jakob From jan.hrdonka at t-mobile.cz Tue Jan 12 03:10:23 2010 From: jan.hrdonka at t-mobile.cz (Hrdonka Jan) Date: Tue, 12 Jan 2010 09:10:23 +0100 Subject: tuning Message-ID: Hi, would you please recommend settings for MaraDNS recursive highly loaded DNS server? (currently 4 GB RAM, no problem to upgrade) I use following settings: maxprocs=500 maximum_cache_elements=2500000 dos_protection_level = 1 Is it reasonable? I think about setting max_mem=0 and/or increasing maxprocs value (e.g. to 2500?) because it can be set higher for the lastest Mara. Thank you for your advice. Regards, H. -- Jan Hrdonka From strenholme.usenet at gmail.com Tue Jan 12 09:06:47 2010 From: strenholme.usenet at gmail.com (Sam Trenholme) Date: Tue, 12 Jan 2010 08:06:47 -0600 Subject: tuning In-Reply-To: References: Message-ID: <7bd685721001120606s34e1ebc3u2b424aebab0e731f@mail.gmail.com> > would you please recommend settings for MaraDNS recursive highly loaded DNS server? How about multiple servers, using Deadwood as a front end load balancer/cache. Something akin to this: ISP users ---> Server running Deadwood as load balancer ---> Multiple MaraDNS servers This way, the load is spread among several machines. MaraDNS is pretty CPU-bound when used as a recursive server and heavily loaded (all of those threads). My goal this year is to make Deadwood fully recursive and thread-free so it's not as CPU-bound when heavily loaded. Then again, this thread-free Deadwood will need a separate process for every CPU/core on a heavily loaded server. Also, if a MaraDNS server is used *only* for recursion, set dos_protection_level to 78. Lower protection levels should only be used if the server is also authoritative, or if you're using MaraDNS with known phish/malware domains disabled. Another idea: Set min_ttl to 3600, so a given domain is only processed once every hour. Deadwood is included with MaraDNS 1.4.02, in the deadwood-2.4.10 directory. Deadwood is MaraDNS with caching, but without recursion nor threads. It's a DNS load balancer on steroids. If you find Deadwood 2.4 is too heavily loaded, look in to Deadwood 2.3 with recursion disabled. Let us know what things work for you. The reason MaraDNS doesn't have documentation for this is because people using MaraDNS in heavily loaded environments haven't shared enough ideas, information, and experience with us for me to write up a HOWTO on the subject. - Sam Note: I do not answer MaraDNS support requests sent by private email without being compensated for my time. A MaraDNS support request is any and all discussion you may wish to have about MaraDNS in private email; if you want to email me to talk about MaraDNS then, yes, that is a support request. I will discuss rates if you want this kind of support. Thank you for your understanding. MaraDNS security vulnerability reports, however, will be dealt with without charge and kept confidential. If you don't know what Bugtraq is, then, no, your email is not a security report. From strenholme.usenet at gmail.com Tue Jan 12 09:09:07 2010 From: strenholme.usenet at gmail.com (Sam Trenholme) Date: Tue, 12 Jan 2010 08:09:07 -0600 Subject: Delivery of non-cached replies In-Reply-To: <4B4B287A.8030602@cern.ch> References: <4ADEFC42.2050802@cern.ch> <7bd685720910210652w771e35f3n126454842a114f21@mail.gmail.com> <4ADF4746.8080107@cern.ch> <7bd685720910211208redd7e56yb1652ec0e8f80538@mail.gmail.com> <4ADF7EA6.3050203@cern.ch> <4B4B287A.8030602@cern.ch> Message-ID: <7bd685721001120609u666c9a4by9fb67941bfa3c237@mail.gmail.com> > after quite some time of chasing (CernVM) bugs and postponing releases, I > finally made deadwood part of the CernVM appliance: > http://rbuilder.cern.ch/search?type=Packages&search=deadwood I'm really pleased to see Cern using one of my programs; this will look impressive on my resume. - Sam Note: I do not answer MaraDNS support requests sent by private email without being compensated for my time. A MaraDNS support request is any and all discussion you may wish to have about MaraDNS in private email; if you want to email me to talk about MaraDNS then, yes, that is a support request. I will discuss rates if you want this kind of support. Thank you for your understanding. MaraDNS security vulnerability reports, however, will be dealt with without charge and kept confidential. If you don't know what Bugtraq is, then, no, your email is not a security report. From wolfmanfr at gmail.com Sun Jan 17 17:01:20 2010 From: wolfmanfr at gmail.com (Daniel C.) Date: Sun, 17 Jan 2010 23:01:20 +0100 Subject: Status argument in /etc/init.d/maradns doesn't exist In-Reply-To: <4B44B92C.8080108@provus.ro> References: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> <4B44B92C.8080108@provus.ro> Message-ID: <28d525851001171401t5171b01es8182fc45cd332d73@mail.gmail.com> I use Maradns with Debian Lenny. The pid of maradns is : /var/run/maradns.etc_maradns_mararc.pid The script was : . /lib/lsb/init-functions case "$1" in start) ... stop) ... status) status_of_proc -p /var/run/maradns.etc_maradns_mararc.pid /usr/sbin/maradns maradns ;; esac The "/etc/init.d/maradns status" work fine :) But I will test this, with hearbeat2 soon. Thanx you Cristian Grigoriu for your help. 2010/1/6 Cristian Grigoriu > Hi, > > > I would use MaraDns with Hearbeat2 but Maradns doesn't had a status >> information in /etc/init.d/maradns, just the args. start|stop|reload >> >> Could you help me ? >> > > You did not specified the host OS. I'll assume you're running a LSB > compliant Linux distribution. > > First include LSB init functions by insertinf this line at the beginning of > your /etc/init.d/maradns script: > > . /lib/lsb/init-functions > > > Then in your case statement: > > case "$1" in > start) > ... > stop) > ... > status) > status_of_proc -p /var/run/maradns.pid /usr/sbin/maradns maradns > ;; > esac > > > Best regards, >> >> PS : Sorry for my bad english >> > > HTH, > > Cristian GRIGORIU > From strenholme.usenet at gmail.com Sun Jan 17 17:18:48 2010 From: strenholme.usenet at gmail.com (Sam Trenholme) Date: Sun, 17 Jan 2010 16:18:48 -0600 Subject: Status argument in /etc/init.d/maradns doesn't exist In-Reply-To: <28d525851001171401t5171b01es8182fc45cd332d73@mail.gmail.com> References: <28d525851001051404v1dc5a927o5ff03b00fe40b54e@mail.gmail.com> <4B44B92C.8080108@provus.ro> <28d525851001171401t5171b01es8182fc45cd332d73@mail.gmail.com> Message-ID: <7bd685721001171418ube409d4o484f3088a5f39b00@mail.gmail.com> > The script was : > > . /lib/lsb/init-functions > case "$1" in > ?start) > ? ... > ?stop) > ? ... > ?status) > ? status_of_proc -p /var/run/maradns.etc_maradns_mararc.pid > /usr/sbin/maradns maradns > ? ;; > esac It might be worth it to include a version of this script in the MaraDNS mainline, so the next person with this particular problem can just grab the startup script from the build/ directory and use it. I will have to ask Kai if this script has a BSD-compatible license sometime this week. Right now, the included startup script is completely different, and doesn't support "status" - Sam Note: I do not answer MaraDNS (including Deadwood) support requests sent by private email without being compensated for my time. A MaraDNS support request is any and all discussion you may wish to have about MaraDNS in private email; if you want to email me to talk about MaraDNS then, yes, that is a support request. I will discuss rates if you want this kind of support. Thank you for your understanding. MaraDNS security vulnerability reports, however, will be dealt with without charge and kept confidential. If you don't know what Bugtraq is, then, no, your email is not a security report. From m.ferlitsch at gmail.com Thu Jan 21 17:55:43 2010 From: m.ferlitsch at gmail.com (Markus Ferlitsch) Date: Thu, 21 Jan 2010 23:55:43 +0100 Subject: zonefile configuraion Message-ID: <1900c9641001211455n428a3d43o66163f02fe9e71c4@mail.gmail.com> Hi, normally a A-enrty looks like this (csv2): www.domain.com. +3600 A 123.456.789.012 Is it possible to replace it to this because my webserver which hosts more than one domain has no static IP. www.domain.com. +3600 A myserver.dyndns.com greetings, Markus. From Robert.Patrick at hq.doe.gov Thu Jan 21 18:11:49 2010 From: Robert.Patrick at hq.doe.gov (Patrick, Robert) Date: Thu, 21 Jan 2010 18:11:49 -0500 Subject: zonefile configuration In-Reply-To: <1900c9641001211455n428a3d43o66163f02fe9e71c4@mail.gmail.com> References: <1900c9641001211455n428a3d43o66163f02fe9e71c4@mail.gmail.com> Message-ID: <6552F588AF5063498DEF42D0DCF684ED580FD4B867@ESCE-EVS-01.doe.local> Markus, You would use a CNAME record for this purpose, not an A record. CNAME = alias, handle this name as that name. A = hostname, resolve this name to this IP address. Ref: http://www.maradns.org/tutorial/man.csv2.html "An A record stores an ipv4 address. A CNAME record is a pointer to another host name." -----Original Message----- From: list-bounces at maradns.org [mailto:list-bounces at maradns.org] On Behalf Of Markus Ferlitsch Sent: Thursday, January 21, 2010 5:56 PM To: list at maradns.org Subject: zonefile configuraion Hi, normally a A-enrty looks like this (csv2): www.domain.com. +3600 A 123.456.789.012 Is it possible to replace it to this because my webserver which hosts more than one domain has no static IP. www.domain.com. +3600 A myserver.dyndns.com greetings, Markus. From deutschem at gmx.de Sat Jan 23 14:54:33 2010 From: deutschem at gmx.de (Deutschem) Date: Sat, 23 Jan 2010 20:54:33 +0100 Subject: star record not work Message-ID: <1264276473.4516.10.camel@wmdcs009> hi, i use the following record in my zone file: *.yahoo.com 127.0.0.1 now when i ping to www.yahoo.com i get a reply from 127.0.0.1 when i ping to yahoo.com i get the ip from yahoo why ? tried bind_star_handling = 0 and 2 i use v1.3.07 From jparrish at layerxtech.com Sat Jan 23 15:09:09 2010 From: jparrish at layerxtech.com (Joey Parrish) Date: Sat, 23 Jan 2010 14:09:09 -0600 Subject: star record not work In-Reply-To: <1264276473.4516.10.camel@wmdcs009> References: <1264276473.4516.10.camel@wmdcs009> Message-ID: <106943DE-7916-401B-9284-79A2E5CB7CD8@layerxtech.com> Because a blank string doesn't match "*.". Try "ls *.txt" and you won't see a file named "txt". It's the same way here. You need another record for the bare domain. --Joey On Jan 23, 2010, at 1:54 PM, Deutschem wrote: > hi, > > i use the following record in my zone file: > > *.yahoo.com 127.0.0.1 > > now when i ping to www.yahoo.com i get a reply from 127.0.0.1 > when i ping to yahoo.com i get the ip from yahoo > > why ? > > tried bind_star_handling = 0 and 2 > > i use v1.3.07 > > > > From deutschem at gmx.de Sat Jan 23 15:38:19 2010 From: deutschem at gmx.de (Deutschem) Date: Sat, 23 Jan 2010 21:38:19 +0100 Subject: star record not work In-Reply-To: <106943DE-7916-401B-9284-79A2E5CB7CD8@layerxtech.com> References: <1264276473.4516.10.camel@wmdcs009> <106943DE-7916-401B-9284-79A2E5CB7CD8@layerxtech.com> Message-ID: <1264279099.4516.11.camel@wmdcs009> ok, i have misunderstood the dokumentation ? right ? Now, let us suppose we want to have the A records for "www.phishsite.foo" and "phishsite.foo" resolve to an IP address that we control the web site for. We would add the following records (lines) to the file /etc/maradns/db.example.com www.phishsite.foo. 192.168.0.2 phishsite.foo. 192.168.0.2 We can also add a star record: *.phishsite.foo. 192.168.0.2 Am Samstag, den 23.01.2010, 14:09 -0600 schrieb Joey Parrish: > Because a blank string doesn't match "*.". Try "ls *.txt" and you > won't see a file named "txt". It's the same way here. > > You need another record for the bare domain. > > --Joey > > On Jan 23, 2010, at 1:54 PM, Deutschem wrote: > > > hi, > > > > i use the following record in my zone file: > > > > *.yahoo.com 127.0.0.1 > > > > now when i ping to www.yahoo.com i get a reply from 127.0.0.1 > > when i ping to yahoo.com i get the ip from yahoo > > > > why ? > > > > tried bind_star_handling = 0 and 2 > > > > i use v1.3.07 > > > > > > > > From jparrish at layerxtech.com Sat Jan 23 19:13:26 2010 From: jparrish at layerxtech.com (Joey Parrish) Date: Sat, 23 Jan 2010 18:13:26 -0600 Subject: star record not work In-Reply-To: <1264279099.4516.11.camel@wmdcs009> References: <1264276473.4516.10.camel@wmdcs009> <106943DE-7916-401B-9284-79A2E5CB7CD8@layerxtech.com> <1264279099.4516.11.camel@wmdcs009> Message-ID: Yes, I believe you are correct. You could also use: phishsite.foo. 192.168.0.2 www.phishsite.foo. 192.168.0.3 ftp.phishsite.foo. 192.168.0.4 # ... *.phishsite.foo. 192.168.0.100 So that specific subdomains, the bare domain, and the catch-all wildcard domain can all have different IPs if you needed them to. MfG, --Joey On Jan 23, 2010, at 2:38 PM, Deutschem wrote: > ok, > > i have misunderstood the dokumentation ? > right ? > > Now, let us suppose we want to have the A records for > "www.phishsite.foo" and "phishsite.foo" resolve to an IP address that we > control the web site for. We would add the following records (lines) to > the file /etc/maradns/db.example.com > > www.phishsite.foo. 192.168.0.2 > phishsite.foo. 192.168.0.2 > We can also add a star record: > *.phishsite.foo. 192.168.0.2 > From deutschem at gmx.de Sun Jan 24 02:32:54 2010 From: deutschem at gmx.de (Deutschem) Date: Sun, 24 Jan 2010 08:32:54 +0100 Subject: star record not work In-Reply-To: References: <1264276473.4516.10.camel@wmdcs009> <106943DE-7916-401B-9284-79A2E5CB7CD8@layerxtech.com> <1264279099.4516.11.camel@wmdcs009> Message-ID: <1264318374.4236.3.camel@wmdcs009> ok, now i have happieness with "sed" thank you for your support. love maraDNS! Am Samstag, den 23.01.2010, 18:13 -0600 schrieb Joey Parrish: > Yes, I believe you are correct. You could also use: > > phishsite.foo. 192.168.0.2 > www.phishsite.foo. 192.168.0.3 > ftp.phishsite.foo. 192.168.0.4 > # ... > *.phishsite.foo. 192.168.0.100 > > So that specific subdomains, the bare domain, and the catch-all wildcard domain can all have different IPs if you needed them to. > > MfG, > --Joey > > On Jan 23, 2010, at 2:38 PM, Deutschem wrote: > > > ok, > > > > i have misunderstood the dokumentation ? > > right ? > > > > Now, let us suppose we want to have the A records for > > "www.phishsite.foo" and "phishsite.foo" resolve to an IP address that we > > control the web site for. We would add the following records (lines) to > > the file /etc/maradns/db.example.com > > > > www.phishsite.foo. 192.168.0.2 > > phishsite.foo. 192.168.0.2 > > We can also add a star record: > > *.phishsite.foo. 192.168.0.2 > > From hendry at iki.fi Mon Jan 25 18:27:15 2010 From: hendry at iki.fi (Kai Hendry) Date: Mon, 25 Jan 2010 23:27:15 +0000 Subject: New Debian packages Message-ID: Hi guys, If any of you are Debian users, could you please try my re-worked packages of 1.4.02: http://hendry.iki.fi/debian/unstable/ Kind regards, From spamcatch-maradns.org at messageme.de Sun Jan 31 22:23:43 2010 From: spamcatch-maradns.org at messageme.de (=?ISO-8859-15?Q?Sebastian_M=FCller?=) Date: Mon, 01 Feb 2010 04:23:43 +0100 Subject: MaraDNS on OpenWRT Message-ID: <4B66493F.6090202@messageme.de> Hi, I am running OpenWRT 8.09 with MaraDNS 1.3.07.08-1 Since I didn't find any bug-reports or alike I am posting here. Maybe it's even not a bug. And I can solve my problem with your assistance. In my network there is a windows 7, a windows xp and a debian sid box. All traffic is routed through a Linksys Router with OpenWRT. Both windows systems are never having any problems in resolving dns from the openwrt router. But the debian box got. When typing "dig somedomain.com", the maradns is resolving. "ping somedomain.com" is working fine, too. But a "telnet somedomain.com XY" prints "telnet: could not resolve somedomain.com/XY: Name or service not known" The same happens with ssh and ftp and so on too. When I type "telnet -4 somedomain.com XY" the resolving works. First I thought that this is some kind of strange IPv6 problem - but my router doesn't have IPv6, the debian box and the windows boxes neigther. So I tried a server running maradns, placed outside of my LAN. Everything works, the debian box is resolving everything without any problems. "telnet somedomain.com XY" is working just fine. The server doesn't got ipv6. So I replaced maradns on openwrt router by bind9 package. And everything is working, too. Is it a bug in maradns? Cheers, Sebastian