> It would be nice if there would be a switch to disable IXFR in
> opendnssec as well.
I concur. Using NSD 4.1.3 I also see issues with IXFR running against
OpenDNSSEC 1.4/devel. Some examples:
nsd[20457]: info: xfrd: zone m04 bad transfer 6 from 192.168.1.110
===
nsd[20458]: warning: diff: RR <m04., RRSIG> rdata element 0 differs from RR
num 5 rdata (rdata data)
nsd[20458]: warning: diff: RR <m04., RRSIG> rdata element 0 differs from RR
num 6 rdata (rdata data)
[...]
nsd[20458]: warning: diff: RR <m04., RRSIG> rdata element 0 differs from RR
num 7 rdata (rdata data)
nsd[20458]: warning: diff: RR <m04., RRSIG> does not exist
nsd[20458]: error: Failed to apply IXFR cleanly (deletes nonexistent RRs, adds
existing RRs). Zone m04. contents is different from master, starting AXFR.
Transfer received update to serial 8 at 2015-08-10T08:02:55 from 192.168.1.110
nsd[20458]: info: zone m04. received update to serial 8 at 2015-08-10T08:02:55
from 192.168.1.110 of 9720 bytes in 0.000194 seconds
nsd[20457]: error: xfrd: zone m04: soa serial 8 update failed, restarting
transfer (notified zone)
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 8 to disk
nsd[20457]: info: xfrd: zone m04 committed "received update to serial 8 at
2015-08-10T08:02:55 from 192.168.1.110"
nsd[20458]: info: rehash of zone m04. with parameters 1 0 5 9a8991824201b96d
nsd[20458]: info: zone m04. received update to serial 8 at 2015-08-10T08:02:55
from 192.168.1.110 of 4682 bytes in 0.000167 seconds
nsd[20457]: info: zone m04 serial 7 is updated to 8.
===
nsd[19726]: info: notify for m04. from 192.168.1.110
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 32 to disk
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 32 to disk
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 32 to disk
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 32 to disk
nsd[20457]: info: xfrd: zone m04 written received XFR packet from
192.168.1.110 with serial 32 to disk
nsd[20457]: info: xfrd: zone m04 reverted transfer 32 from 192.168.1.110
I've given up on that and now configure NSD to use AXFR only:
request-xfr: AXFR 192.168.1.110 NOKEY
^^^^
Regards,
-JP
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
