Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am seemingly randomly, but frequently (every few mins) losing my internet connectivity. The problem is not on the ADSL modem, but on the linux router, that follows. A DNS server (bind) is running on the linux router and when I can't access webpages , I realised, it is because I get no replies to my dns requests.

using the command tcpdump -ni eth1 -s 128 port 53

I send dns queries but don't get a reply. For example:

02:41:48.188398 IP > 6525 A? (30)
02:41:48.188480 IP > 62058 AAAA? (30)
02:41:48.188531 IP > 60509 A? (30)
02:41:48.188715 IP > 22077 AAAA? (30)
02:41:48.188884 IP > 43050 AAAA? (30)
02:41:49.680811 IP > 34223+ AAAA? PLUS.GOOGLE.COM. (33)
02:41:49.833793 IP > 18062 A? (30)
02:41:49.834410 IP > 37252 A? (30)
02:41:49.834465 IP > 9728 A? (30)
02:41:49.834589 IP > 25022 AAAA? (30)
02:41:49.834726 IP > 65397 AAAA? (30)
02:41:49.834810 IP > 52550 AAAA? (30)
02:41:50.362847 IP > 9737+ [1au] AAAA? CSI.GSTATIC.COM. (44)

ip adress is my side.

This question is following from this question, but apparently the problem occurs even when I am not downloading torrents.

since with torrents I could sort of avert the problem by limiting the download & upload rate of my torrents, I checked with iptraf the incoming / outgoing rate of packets.

When my connection works smoothly, the inc/outg are up to 12/24 kbps. when I can't access webpages (for the 2-4 mins duration) the rates are reduced abit complared to the above - but that could be an error on my part (due to limited observation sample).

I can't find a pattern as to why I don't get dns replies... my named.conf doesn't show anythin in the logs. still there may be an error in my config as the queries.log is always empty. Do you have any suggestions?

Thank you for your help

share|improve this question
Check you forwarders (in named.conf) in the order they are. Use nslookup for example for that. – Ashtray Aug 6 '13 at 5:42
how could I do that with nslookup? I am not sure exact what to check... – nass Aug 6 '13 at 11:27

You address ( is simply not allowed to make a query to the server as it is not in the trusted ACL.

allow-query { trusted_subnets; };

acl trusted_subnets {

acl outbound_subnet {;          // Your address is matched here

You can check this doc on allow-query option in config.

share|improve this answer
The ip address you see, is the eth1 in my server and it is the internet-side iface (ie. it is connected to an adsl modem). To be honest I do not want the dns server to answer queries that originate on the internet side, just queries on the intranet side (and some vpn sites too). So I shouldn't add outbound_subnet in my allow-query statement. What do you think? – nass Aug 6 '13 at 7:22
Wait a minute. is your local address still. It's behind your ADSL modem/router's NAT. It is safe to let it make queries as it has nothing to do with the Internet. Internet is on the other side of the router. If I understand your setup correctly – Ashtray Aug 6 '13 at 7:25
internet is on the other side of the ADSL modem (not the router). The router is a linux pc. This side of the ADSL modem ( that connects to the router is just a DMZ). Thing is , there are no queries done from the ADSL<->Router subnet, or at least thats what i think. What you see above is just the BIND server quering ISP, GOOGLE and OpenDNS dns servers for domains it doesn't itself know about. or am I not thinking this right...? Also if what you propose in your reply is true, then I shouldn't have internet altogether, instead of losing it randomly. no? – nass Aug 6 '13 at 10:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.