We thought of two other differences between this zone and the others: 1. this zone has NS records with servers that are in the zone itself, and 2. our global "also-notify" option contain IP addresses that resolve to host names in this zone.
Could the problem be the result of the servers notifying each other? On 2 Mar 2012, at 5:13 PM, David Kreindler wrote: > When BIND 9.9.0 was released, we started converting our DNSSEC-signed zones > to inline signing. > > Everything went smoothly with all but one of our zones ("pesky.zone", below). > With that zone, after named signed it and completed an AXFR-style IXFR to > each of four slaves, it proceeded to start repeatedly incrementing the SOA > serial and retransferring. By the time we stopped it, named had incremented > the serial almost 200 times, with corresponding IXFRs. > > There is nothing different about this zone from any of our others, except > that it contains somewhat more RRs. (There are no dynamic updates permitted, > no DS records for delegated subdomains, nothing else that we could think of > to explain the behavior.) > > Why would named go crazy when we configure inline signing for this one zone, > when all of our other zones are working fine with inline signing? > > Mar 2 14:33:14 ns0 named[806928]: received control channel command > 'reconfig' > Mar 2 14:33:14 ns0 named[806928]: loading configuration from > '/etc/named.conf' > Mar 2 14:33:14 ns0 named[806928]: reading built-in trusted keys from > file '/etc/bind.keys' > Mar 2 14:33:14 ns0 named[806928]: using default UDP/IPv4 port range: > [1024, 65535] > Mar 2 14:33:14 ns0 named[806928]: using default UDP/IPv6 port range: > [1024, 65535] > Mar 2 14:33:14 ns0 named[806928]: prefix length for ::1 is unknown > (assume 128) > Mar 2 14:33:14 ns0 named[806928]: sizing zone task pool based on 207 > zones > Mar 2 14:33:15 ns0 named[806928]: zone pesky.zone/IN: (master) removed > Mar 2 14:33:15 ns0 named[806928]: prefix length for ::1 is unknown > (assume 128) > Mar 2 14:33:15 ns0 named[806928]: reloading configuration succeeded > Mar 2 14:33:15 ns0 named[806928]: zone pesky.zone/IN (unsigned): > loaded serial 2012030200 > Mar 2 14:33:15 ns0 named[806928]: any newly configured zones are now > loaded > ... > Mar 2 14:33:15 ns0 named[806928]: zone pesky.zone/IN (signed): loaded > serial 2012030200 > Mar 2 14:33:15 ns0 daemon:err|error named[806928]: zone pesky.zone/IN > (signed): receive_secure_serial: unchanged > Mar 2 14:33:15 ns0 named[806928]: zone pesky.zone/IN (signed): > reconfiguring zone keys > Mar 2 14:33:16 ns0 named[806928]: zone pesky.zone/IN (signed): next > key event: 02-Mar-2012 15:33:15.740 > Mar 2 14:33:16 ns0 named[806928]: client [ns3]#42941/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR started: TSIG > ns0-ns3 > Mar 2 14:33:17 ns0 named[806928]: client [ns4]#48695/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR started: TSIG > ns0-ns4 > Mar 2 14:33:17 ns0 named[806928]: client [ns2]#52228/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR started: TSIG > ns0-ns2 > Mar 2 14:33:17 ns0 named[806928]: client [ns3]#42941/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR ended > Mar 2 14:33:17 ns0 named[806928]: client [ns1]#51606/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR started: TSIG > ns0-ns1 > Mar 2 14:33:18 ns0 named[806928]: client [ns4]#48695/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR ended > Mar 2 14:33:18 ns0 named[806928]: client [ns2]#52228/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR ended > Mar 2 14:33:18 ns0 named[806928]: client [ns1]#51606/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': AXFR-style IXFR ended > Mar 2 14:33:21 ns0 named[806928]: client [ns3]#42944/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:21 ns0 named[806928]: client [ns3]#42944/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:21 ns0 named[806928]: client [ns2]#52229/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:21 ns0 named[806928]: client [ns4]#48700/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:21 ns0 named[806928]: client [ns1]#51607/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:22 ns0 named[806928]: client [ns2]#52229/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:22 ns0 named[806928]: client [ns4]#48700/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:22 ns0 named[806928]: client [ns1]#51607/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:26 ns0 named[806928]: client [ns3]#42945/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:26 ns0 named[806928]: client [ns3]#42945/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:26 ns0 named[806928]: client [ns2]#52230/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:26 ns0 named[806928]: client [ns4]#48702/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:26 ns0 named[806928]: client [ns1]#51608/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:27 ns0 named[806928]: client [ns4]#48702/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:27 ns0 named[806928]: client [ns2]#52230/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:27 ns0 named[806928]: client [ns1]#51608/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:31 ns0 named[806928]: client [ns3]#42947/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:31 ns0 named[806928]: client [ns3]#42947/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:31 ns0 named[806928]: client [ns1]#51609/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:31 ns0 named[806928]: client [ns4]#48703/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:31 ns0 named[806928]: client [ns2]#52231/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:32 ns0 named[806928]: client [ns4]#48703/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:32 ns0 named[806928]: client [ns1]#51609/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:32 ns0 named[806928]: client [ns2]#52231/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:36 ns0 named[806928]: client [ns3]#42952/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:36 ns0 named[806928]: client [ns3]#42952/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:37 ns0 named[806928]: client [ns2]#52232/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:37 ns0 named[806928]: client [ns4]#48706/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:37 ns0 named[806928]: client [ns1]#51610/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:37 ns0 named[806928]: client [ns2]#52232/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:37 ns0 named[806928]: client [ns4]#48706/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:37 ns0 named[806928]: client [ns1]#51610/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:41 ns0 named[806928]: client [ns3]#42954/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:42 ns0 named[806928]: client [ns3]#42954/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:42 ns0 named[806928]: client [ns4]#48709/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:42 ns0 named[806928]: client [ns2]#52233/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:42 ns0 named[806928]: client [ns1]#51611/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:42 ns0 named[806928]: client [ns4]#48709/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:42 ns0 named[806928]: client [ns2]#52233/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:42 ns0 named[806928]: client [ns1]#51611/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:46 ns0 named[806928]: client [ns3]#42957/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:47 ns0 named[806928]: client [ns3]#42957/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:47 ns0 named[806928]: client [ns1]#51612/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:47 ns0 named[806928]: client [ns2]#52234/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:47 ns0 named[806928]: client [ns4]#48710/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:47 ns0 named[806928]: client [ns1]#51612/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:47 ns0 named[806928]: client [ns4]#48710/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:47 ns0 named[806928]: client [ns2]#52234/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:52 ns0 named[806928]: client [ns3]#42960/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:52 ns0 named[806928]: client [ns3]#42960/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:52 ns0 named[806928]: client [ns1]#51613/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:52 ns0 named[806928]: client [ns4]#48713/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:52 ns0 named[806928]: client [ns2]#52235/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:52 ns0 named[806928]: client [ns4]#48713/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:52 ns0 named[806928]: client [ns1]#51613/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:52 ns0 named[806928]: client [ns2]#52235/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:57 ns0 named[806928]: client [ns3]#42962/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:33:57 ns0 named[806928]: client [ns3]#42962/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:57 ns0 named[806928]: client [ns1]#51614/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:33:57 ns0 named[806928]: client [ns4]#48715/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:33:57 ns0 named[806928]: client [ns2]#52236/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:33:58 ns0 named[806928]: client [ns4]#48715/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:58 ns0 named[806928]: client [ns1]#51614/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:33:58 ns0 named[806928]: client [ns2]#52236/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:34:02 ns0 named[806928]: client [ns3]#42963/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns3 > Mar 2 14:34:02 ns0 named[806928]: client [ns3]#42963/key ns0-ns3 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:34:02 ns0 named[806928]: client [ns4]#48718/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns4 > Mar 2 14:34:02 ns0 named[806928]: client [ns2]#52237/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns2 > Mar 2 14:34:02 ns0 named[806928]: client [ns1]#51615/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR started: TSIG ns0-ns1 > Mar 2 14:34:03 ns0 named[806928]: client [ns4]#48718/key ns0-ns4 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:34:03 ns0 named[806928]: client [ns2]#52237/key ns0-ns2 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > Mar 2 14:34:03 ns0 named[806928]: client [ns1]#51615/key ns0-ns1 > (pesky.zone): transfer of 'pesky.zone/IN': IXFR ended > .... > > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users