Re: Unable to slave root zones

2017-04-08 Thread Mark Knight

On 08/04/2017 07:56, Dave Warren wrote:


Why wouldn't you just use the ICANN's authorized zone transfer servers?

http://www.dns.icann.org/services/axfr/



This is what I've now done. Thanks for all of the replies (on and off list)!

--
Mark Knight
Mobile: +44 7753 250584.  http://www.knigma.org/
Email: ma...@knigma.org.  Skype: knigma
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Unable to slave root zones

2017-04-07 Thread Mark Knight
I've just noticed (after the slave zones expired), that the root name 
servers have been refusing my zone transfer requests since the end of March.


My confirm is per the standard named.conf example, e.g.:

zone "." {
type slave;
file "/usr/local/etc/namedb/slave/root.slave";
masters {
192.5.5.241;// F.ROOT-SERVERS.NET.
};
allow-query { localnets; };
notify no;
};

Apr  7 00:06:29 steamer named[25909]: transfer of './IN' from 
192.5.5.241#53: Transfer status: REFUSED
Apr  7 13:21:20 steamer named[550]: transfer of 'arpa/IN' from 
192.5.5.241#53: Transfer status: REFUSED


I cannot find any announcement that this is now disallowed, any ideas 
what's changed or how I should do this?


Thanks, Mark
--
Mark Knight
Mobile: +44 7753 250584.  http://www.knigma.org/
Email: ma...@knigma.org.  Skype: knigma
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users