> Its there
> 
> zone "rpz" {
>    type master;
>    file "/etc/bind/zones/rpz.db";
>    allow-query { none; };
>    allow-transfer { 10.0.0.1; };
> };

I asked:
"The slave is making a SOA query to the master and is getting refused as
as response.  I would be checking your acls.  Look at the logs on the
master."

And you answered:
"No ACLs in place."

"allow-query { none; };" is _not_ "No ACLs in place."

Allow-query should be a superset of allow-transfer.

> Nov 16 00:12:51 [Redacted] named[32736]: client SLAVE#39164: bad zone
> transfer request: 'rpz/IN': non-authoritative zone (NOTAUTH)
> Nov 16 00:13:40 [Redacted] named[32736]: client SLAVE#59205: bad zone
> transfer request: 'rpz/IN': non-authoritative zone (NOTAUTH)

Is still indicative of the server not being configured to serve the zone.
You have the wrong named.conf or have not reloaded the nameserver.

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: ma...@isc.org
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to