Mark South <mark.south@null.invalid> writes:

> I'm sure this is a clueless newbie question, so please feel free to be
> vicious in your condemnations. However, it would still be useful to me if
> those condemnations included chapter and verse of the docs.... :-)
>
> That said, the situation: fresh vanilla OBSD 4.1 install on a machine
> intended for desktop use. Machine is on a LAN behind a commercial ADSL
> router and getting its IP address from an internal DHCP server on
> 192.168.0.1. If I do "lynx openbsd.org" then lynx pauses for a few minutes
> with a "looking up openbsd.org" message. The page eventually loads, and
> following a link on that page to elsewhere on the same site leads to the
> same message and the same delay. This behaviour is site independent.

check if you have such enviroment variables as 'http_proxy' or 'HTTP_PROXY'
set. if set, check if its values are correct.

>
> At the same time, if I do "nslookup openbsd.org" it returns the IP address
> instantly, and "lynx 199.185.137.3" everything runs at warp speed.
>
> /etc/resolv.conf:
> -----------------
> search mylan.int
> nameserver 192.168.0.1
> lookup file bind

normally, you do not need 'search mylan.int' present in your /etc/resolv.conf.
and, make sure there IS a name server running on 192.168.0.1.

>
> Putting my ISP's nameserver addresses into /etc/resolv.conf.tail makes no
> difference.
>
> Other machines on the same LAN running Linux and MacOS, also getting
> addresses by DHCP, have no such difficulties, except that I've seen
> similar delays on those machines from Firefox when it tries to use IPv6.
>
> So, my question is, can I change something to get better lookup behaviour
> from lynx? And a related question, can this be done in a site-independent
> way?
>
> To reiterate, the fact that I'm sure I deserve a thorough beating for
> asking a question, the answer to which is obvious to the rest of the
> world, in no way reduces my appreciation of any help that may be given in
> spite of my cluelessness.
>
> Thanks in advance for everything,
> Mark
> --
> signature still absent

--
Wherefore thus saith the LORD God of hosts, Because ye speak this
word, behold, I will make my words in thy mouth fire, and this
people wood, and it shall devour them.
-- Jeremiah 5:14

On Wed, 26 Sep 2007 19:06:13 +0800, dhg wrote:

First, thanks very much for your reply.

> Mark South <mark.south@null.invalid> writes:

> check if you have such enviroment variables as 'http_proxy' or 'HTTP_PROXY'
> set. if set, check if its values are correct.

They aren't set, and shouldn't be needed.

>> At the same time, if I do "nslookup openbsd.org" it returns the IP address
>> instantly, and "lynx 199.185.137.3" everything runs at warp speed.
>>
>> /etc/resolv.conf:
>> -----------------
>> search mylan.int
>> nameserver 192.168.0.1
>> lookup file bind
>
> normally, you do not need 'search mylan.int' present in your /etc/resolv.conf.
> and, make sure there IS a name server running on 192.168.0.1.

That line is written by DHCP, but even taking it out manually doesn't fix
the problem.

There is a functioning nameserver at 192.168.0.1, all non-OBSD machines on
the LAN are resolving rapidly and accurately.

>> Putting my ISP's nameserver addresses into /etc/resolv.conf.tail makes
>> no difference.

Note, BTW, that a nameserver line in /etc/resolv.conf.tail overrides the
line in /etc/resolv.conf.

Some further info: since posting this query it occurred to me (duhhh!) to
run tcpdump to monitor the network interface on port 53. As well as lynx,
I have also tried using opera installed from ports.

The timeouts seem to be because the applications are asking for AAAA
records before falling back and doing A record requests. Opera has a
noticeably shorter induced delay than lynx, but it's still there.

So, I suppose I should be asking: how to stop the system asking for AAAA
records and get it to request A records directly?

Thanks again,
Mark
--
where did that blasted .sig get to now?

"Mark South" <mark.south@null.invalid> wrote in message
news:4703424b$1_5@news.bluewin.ch...
> On Wed, 03 Oct 2007 06:42:15 +0000, Joachim Schipper wrote:
>>
>> It appears this is not happening in your case, which would indeed
>> cause
>> timeouts. In other words, your ISP has a broken setup, but might be
>> willing to fix this for you.
>
> I'll take the suggestion and talk to them, even though I'm pretty sure
> that I'm going to get the "it's not our fault if they don't have AAAA
> records" kind of repsonse....
>
>> If they are not willing, and you can find some DNS server that will
>> correctly answer your queries, use that. I suppose there must be some
>> on
>> the whole wide internet.
>
> I shall have a look. Sadly, this will bust my (otherwise working very
> well) DHCP setup.

At the risk of stating the obvious: you can use *any* public DNS
server - it doesn't have to be your ISP's.

Steve
http://www.fivetrees.com

On Thu, 04 Oct 2007 18:57:36 +0100, Steve at fivetrees wrote:

> "Mark South" <mark.south@null.invalid> wrote in message
> news:4703424b$1_5@news.bluewin.ch...
>> On Wed, 03 Oct 2007 06:42:15 +0000, Joachim Schipper wrote:
>>>
>>> It appears this is not happening in your case, which would indeed
>>> cause
>>> timeouts. In other words, your ISP has a broken setup, but might be
>>> willing to fix this for you.
>>
>> I'll take the suggestion and talk to them, even though I'm pretty sure
>> that I'm going to get the "it's not our fault if they don't have AAAA
>> records" kind of repsonse....
>>
>>> If they are not willing, and you can find some DNS server that will
>>> correctly answer your queries, use that. I suppose there must be some
>>> on
>>> the whole wide internet.
>>
>> I shall have a look. Sadly, this will bust my (otherwise working very
>> well) DHCP setup.
>
> At the risk of stating the obvious: you can use *any* public DNS
> server - it doesn't have to be your ISP's.

Yes, thank you, I do understand this. Although do understand that some
ISPs do not permit this, either by restricting TOS or by filtering.

I have been doing quite a lot of research on this problem, including trying
various public DNS servers. AFAICT from a random survey, about half of
them behave the same as my ISP's DNS servers.

The most heavily touted is OpenDNS, which behaves correctly about 3/4 of
the time, but occasionally fails to return a response to AAAA records.

> Steve
> http://www.fivetrees.com

Your sig is b0rken, BTW :-)

"Mark South" <mark.south@null.invalid> wrote in message
news:4705ded1$1_7@news.bluewin.ch...
> On Thu, 04 Oct 2007 18:57:36 +0100, Steve at fivetrees wrote:
>
>> At the risk of stating the obvious: you can use *any* public DNS
>> server - it doesn't have to be your ISP's.
>
> Yes, thank you, I do understand this. Although do understand that
> some
> ISPs do not permit this, either by restricting TOS or by filtering.
>
> I have been doing quite a lot of research on this problem, including
> trying
> various public DNS servers. AFAICT from a random survey, about half of
> them behave the same as my ISP's DNS servers.
>
> The most heavily touted is OpenDNS, which behaves correctly about 3/4
> of
> the time, but occasionally fails to return a response to AAAA records.

Bizarre. I'd have expected to run into this myself - but I haven't.

>> Steve
>> http://www.fivetrees.com
>
> Your sig is b0rken, BTW :-)

Oh? In what way? Works for me... colour me confused .

Steve
(sig as above)

According to Steve at fivetrees <steve@NOSPAMTAfivetrees.com>:
> "Mark South" <mark.south@null.invalid> wrote in message
> news:4705ded1$1_7@news.bluewin.ch...
> > On Thu, 04 Oct 2007 18:57:36 +0100, Steve at fivetrees wrote:

[ ... ]

> >> Steve
> >> http://www.fivetrees.com
> >
> > Your sig is b0rken, BTW :-)
>
> Oh? In what way? Works for me... colour me confused .

It is missing the preceding line of "-- " (two hyphens and a
space) which serve as a flag that what follows is a .sig, so a followup
can automatically trim that (if the newsreader is so configured).

Enjoy,
DoN.

--
Email: <dnichols@d-and-d.com> | Voice (all times): (703) 938-4564
(too) near Washington D.C. | http://www.d-and-d.com/dnichols/DoN.html
--- Black Holes are where God is dividing by zero ---

On Fri, 05 Oct 2007 21:21:51 +0100, Steve at fivetrees wrote:

> "Mark South" <mark.south@null.invalid> wrote in message
> news:4705ded1$1_7@news.bluewin.ch...
>> On Thu, 04 Oct 2007 18:57:36 +0100, Steve at fivetrees wrote:
>>
>>> At the risk of stating the obvious: you can use *any* public DNS
>>> server - it doesn't have to be your ISP's.
>>
>> Yes, thank you, I do understand this. Although do understand that
>> some
>> ISPs do not permit this, either by restricting TOS or by filtering.
>>
>> I have been doing quite a lot of research on this problem, including
>> trying
>> various public DNS servers. AFAICT from a random survey, about half of
>> them behave the same as my ISP's DNS servers.
>>
>> The most heavily touted is OpenDNS, which behaves correctly about 3/4
>> of
>> the time, but occasionally fails to return a response to AAAA records.
>
> Bizarre. I'd have expected to run into this myself - but I haven't.

OpenDNS has a distributed server farm, obviously not all the servers have
the exact same configuration.

>>> Steve
>>> http://www.fivetrees.com
>>
>> Your sig is b0rken, BTW :-)
>
> Oh? In what way? Works for me... colour me confused .

It needs "-- " without the quotes on a line by itself at the beginning.
Vide mine:

Mark
--
There is no sig.

"Mark South" <mark.south@null.invalid> wrote in message
news:4708e500$1_7@news.bluewin.ch...
> On Fri, 05 Oct 2007 21:21:51 +0100, Steve at fivetrees wrote:
>>>> Steve
>>>> http://www.fivetrees.com
>>>
>>> Your sig is b0rken, BTW :-)
>>
>> Oh? In what way? Works for me... colour me confused .
>
> It needs "-- " without the quotes on a line by itself at the
> beginning.
> Vide mine:
>
> Mark
> --
> There is no sig.

Thanks for the clarification (also to DoN). I guess the reason it's
broken is that it's not a sig as such - I type in it each time .

I'll setup a proper sig. Soon...

Steve

On Sun, 07 Oct 2007 15:43:30 +0100, Steve at fivetrees wrote:

> "Mark South" <mark.south@null.invalid> wrote in message
> news:4708e500$1_7@news.bluewin.ch...
>> It needs "-- " without the quotes on a line by itself at the
>> beginning.
>> Vide mine:
>>
>> Mark
>
> Thanks for the clarification (also to DoN). I guess the reason it's
> broken is that it's not a sig as such - I type in it each time .

So do I. Too boring to have the same sig every time :-)
--
"I'll setup a proper sig. Soon..." - Steve

"Mark South" <mark.south@null.invalid> wrote in message
news:47090656$1_7@news.bluewin.ch...
> On Sun, 07 Oct 2007 15:43:30 +0100, Steve at fivetrees wrote:
>
>> "Mark South" <mark.south@null.invalid> wrote in message
>> news:4708e500$1_7@news.bluewin.ch...
>>> It needs "-- " without the quotes on a line by itself at the
>>> beginning.
>>> Vide mine:
>>>
>>> Mark
>>
>> Thanks for the clarification (also to DoN). I guess the reason it's
>> broken is that it's not a sig as such - I type in it each time .
>
> So do I. Too boring to have the same sig every time :-)
> --
> "I'll setup a proper sig. Soon..." - Steve

LOL

Steve
--
Any day now...