# DNS: dot querys

**URL:** <https://forums.suse.com/t/dns-dot-querys/23110>\
**Category:** SLES Networking\
**Created:** [September 18, 2012, 9:06pm UTC](https://forums.suse.com/t/dns-dot-querys/23110 "2012-09-18T21:06:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Achim](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@Achim](https://forums.suse.com/u/Achim)\
**Post date:** [September 18, 2012, 9:06pm UTC](https://forums.suse.com/t/dns-dot-querys/23110/1 "2012-09-18T21:06:30Z")

</div>

Today I have installed a nameserver using bind. After configuring the first clients I noticed a problem when logging of. Each logoff causes a delay from about 10 seconds.

I tried to identify the problem using tcpdump. And I could see that with each logoff and DNS query “.” is running.

```auto
16:07:23.373217 IP fcbsrv03.36468 > fcbxen53.domain: 18357+ A? . (17) 
```

So the first question is “what is the reason for the dot query”?

I checked a nameserver in an other environment and this server answers the query with a quick

[CODE]pagdns001:/var/lib/named/master # nslookup .  
Server: 172.23.0.8  
Address: 172.23.0.8#53

Non-authoritative answer:  
\*\*\* Can’t find .: No answer[/CODE]

But the new nameserver is forwarding the query to his forwarders and ends with a timeout after 10 to 15 seconds. Which is causing the delay when logging off.

[CODE]fcbsrv03:~ # time nslookup .  
;; connection timed out; no servers could be reached

real 0m15.026s  
user 0m0.008s  
sys 0m0.004s[/CODE]

I have double-checked the configuration but I could not find a difference. So why does the new server forward the request and the other one not?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\
**Post date:** [September 27, 2012, 3:30pm UTC](https://forums.suse.com/t/dns-dot-querys/23110/2 "2012-09-27T15:30:57Z")

</div>

A13923,

It appears that in the past few days you have not received a response to your  
posting. That concerns us, and has triggered this automated reply.

Has your issue been resolved? If not, you might try one of the following options:

- Visit [http://www.suse.com/support](http://www.suse.com/support) and search the knowledgebase and/or check all  
the other support options available.
- You could also try posting your message again. Make sure it is posted in the  
correct newsgroup. ([http://forums.suse.com](http://forums.suse.com))

Be sure to read the forum FAQ about what to expect in the way of responses:  
[http://forums.suse.com/faq.php](http://forums.suse.com/faq.php)

If this is a reply to a duplicate posting, please ignore and accept our apologies  
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your SUSE Forums Team  
[http://forums.suse.com](http://forums.suse.com)

---

<div class="post-metadata">

**Author:** ![summitflier](https://avatars.discourse-cdn.com/v4/letter/s/f0a364/32.png) [@summitflier](https://forums.suse.com/u/summitflier)\
**Post date:** [April 1, 2013, 9:11pm UTC](https://forums.suse.com/t/dns-dot-querys/23110/3 "2013-04-01T21:11:41Z")

</div>

Have you created a root hints file for your DNS server?  
Is this a real registered domain with a real SOA? ( or just a local internal domain? )

what does your nsswitch.conf and resolv.conf look like on the one that doesn’t work?

---

<div class="post-metadata">

**Author:** ![Jens-U](https://avatars.discourse-cdn.com/v4/letter/j/d78d45/32.png) [@Jens-U](https://forums.suse.com/u/Jens-U)\
**Post date:** [April 3, 2013, 3:17pm UTC](https://forums.suse.com/t/dns-dot-querys/23110/4 "2013-04-03T15:17:34Z")

</div>

Hi A13923,

> ```
> Today I have installed a nameserver using bind. [...] I tried to identify the problem using tcpdump.
> 
> ```

what type of server did you set up - a simple forwarder, or does this DNS server answer local zones, too?  
Did you try turning query logging on within the DNS server?

That “.” query does seem a bit strange, indeed. How’s the “.” zone set up in your named.conf? Is is somehow included in other configuration elements (included files, LDAP, …)? Do “.” zone dumps from both name daemons compare?

Maybe I should have asked first… _what_ named daemon have you set up, and on which platform? 😉

Regards,  
Jens
