Mart van de Wege <mvdw...@gmail.com> wrote: > Tony Finch <d...@dotat.at> writes: > > Mart van de Wege <mvdw...@gmail.com> wrote: > >> > >> How do I go about troubleshooting this issue to get a better idea of > >> what is going on? > > > > Are there any messages in your log containing the string " refresh: "? > > I have a couple, all of them 'retry limit for master $foo exceeded'.
That implies that the SOA query (which checks if an XFR is necessary) is timing out. Try running the following on the secondary to see what fails. If you have a TSIG key you will need to use the -k or -y options. dig soa $zone @$master dig +noedns soa $zone @$master dig +tcp soa $zone @$master dig axfr $zone @$master A lot of the refresh failure logging happens at debug level 1 so you can get more details by running `rndc trace 1`. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Southwest Forties, Cromarty, Forth: Cyclonic 3 or 4, occasionally 5. Slight, occasionally moderate. Rain or showers. Good, occasionally poor. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users