Re: Zone transfer doesn't work when I set allow-update statement

[/dev/rob0]

On Tue, Apr 29, 2014 at 09:50:11AM -0300, Jeronimo L. Cabral wrote:
> Please the last question: can I dynamically update a zone and
> -when necessary- make a freeze, manually add/delete records, and
> after that make a thaw to continue with the dynamic update
> In other words, a mix betwwen dynamic and manually update.

That's precisely what freeze/thaw is for.

Do note, however, that you lose the zone's history (which is 
necessary for IXFR, and perhaps a matter of interest otherwise)
when you do this. My suggestion is that you learn to be more
comfortable with nsupdate procedures, and stop using freeze/thaw.

> On Fri, Apr 25, 2014 at 6:04 PM, Evan Hunt  wrote:
> 
> > On Fri, Apr 25, 2014 at 05:29:30PM -0300, Jeronimo L. Cabral 
> > wrote:
> > > But the master zone is not refreshed until I execute
> > > "service bind9 restart" ("service bind9 reload" doesn't
> > > refresh the master zone).
> >
> > The zone has been updated, but the changes are stored in a 
> > journal file ("zonefile.jnl").  You can look at the contents
> > of the journal file with "named-journalprint ".
> >
> > If you want to dump the current version of the zone to disk so 
> > you can look at the whole thing, use "rndc sync ".
> >
> > (That's assuming this is a fairly recent BIND.  If it doesn't 
> > support sync, use "rndc freeze ; rndc thaw ".)
-- 
  http://rob0.nodns4.us/
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Sten Carlsen]

On 29/04/14 14.50, Jeronimo L. Cabral wrote:
> Dear, thanks for your help.
>
> Please the last question: can I dynamically update a zone and -when
> necessary- make a freeze, manually add/delete records, and after that
> make a thaw to continue with the dynamic update In other words, a
> mix betwwen dynamic and manually update.
>
I do this, not often, works as expected. Do be careful not to interfere
with the DHCP administered entries.
> Thanks again,
>
> JeLo
>
>
> On Fri, Apr 25, 2014 at 6:04 PM, Evan Hunt  > wrote:
>
> On Fri, Apr 25, 2014 at 05:29:30PM -0300, Jeronimo L. Cabral wrote:
> > But the master zone is not refreshed until I execute "service bind9
> > restart" ("service bind9 reload" doesn't refresh the master zone).
>
> The zone has been updated, but the changes are stored in a journal
> file
> ("zonefile.jnl").  You can look at the contents of the journal file
> with "named-journalprint ".
>
> If you want to dump the current version of the zone to disk so you
> can look at the whole thing, use "rndc sync ".
>
> (That's assuming this is a fairly recent BIND.  If it doesn't support
> sync, use "rndc freeze ; rndc thaw ".)
>
> --
> Evan Hunt -- e...@isc.org 
> Internet Systems Consortium, Inc.
>
>
>
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Best regards

Sten Carlsen

No improvements come from shouting:

   "MALE BOVINE MANURE!!!" 

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Jeronimo L. Cabral]

Dear, thanks for your help.

Please the last question: can I dynamically update a zone and -when
necessary- make a freeze, manually add/delete records, and after that make
a thaw to continue with the dynamic update In other words, a mix
betwwen dynamic and manually update.

Thanks again,

JeLo


On Fri, Apr 25, 2014 at 6:04 PM, Evan Hunt  wrote:

> On Fri, Apr 25, 2014 at 05:29:30PM -0300, Jeronimo L. Cabral wrote:
> > But the master zone is not refreshed until I execute "service bind9
> > restart" ("service bind9 reload" doesn't refresh the master zone).
>
> The zone has been updated, but the changes are stored in a journal file
> ("zonefile.jnl").  You can look at the contents of the journal file
> with "named-journalprint ".
>
> If you want to dump the current version of the zone to disk so you
> can look at the whole thing, use "rndc sync ".
>
> (That's assuming this is a fairly recent BIND.  If it doesn't support
> sync, use "rndc freeze ; rndc thaw ".)
>
> --
> Evan Hunt -- e...@isc.org
> Internet Systems Consortium, Inc.
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Doug Barton]

On 04/25/2014 02:04 PM, Evan Hunt wrote:

On Fri, Apr 25, 2014 at 05:29:30PM -0300, Jeronimo L. Cabral wrote:

But the master zone is not refreshed until I execute "service bind9
restart" ("service bind9 reload" doesn't refresh the master zone).


The zone has been updated, but the changes are stored in a journal file
("zonefile.jnl").  You can look at the contents of the journal file
with "named-journalprint ".

If you want to dump the current version of the zone to disk so you
can look at the whole thing, use "rndc sync ".

(That's assuming this is a fairly recent BIND.  If it doesn't support
sync, use "rndc freeze ; rndc thaw ".)


Or, just do a zone transfer. No need to freeze/thaw, and no interruption 
to dynamic updates.


Doug

___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Evan Hunt]

On Fri, Apr 25, 2014 at 05:29:30PM -0300, Jeronimo L. Cabral wrote:
> But the master zone is not refreshed until I execute "service bind9
> restart" ("service bind9 reload" doesn't refresh the master zone).

The zone has been updated, but the changes are stored in a journal file
("zonefile.jnl").  You can look at the contents of the journal file
with "named-journalprint ".

If you want to dump the current version of the zone to disk so you
can look at the whole thing, use "rndc sync ".

(That's assuming this is a fairly recent BIND.  If it doesn't support
sync, use "rndc freeze ; rndc thaw ".)

-- 
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Lyle Giese]

How are you checking for updated info from the master?

I recommend

dig @ test.company.com.ar

Lyle Giese
LCR Computer Services, Inc.

On 04/25/14 15:29, Jeronimo L. Cabral wrote:
Thanks a lot, but using the allow-update statement, I use nsupdate in 
order to add a new record:


# nsupdate
> server x.x.x.x
>zone company.com.ar 
>update add test.company.com.ar  86400 A 
1.1.1.1

>send
>quit

But the master zone is not refreshed until I execute "service bind9 
restart" ("service bind9 reload" doesn't refresh the master zone).


How can I do in order to add new records using nsupdate without 
restarting the bind9 service ???


Thanks again !!!


On Fri, Apr 25, 2014 at 5:12 PM, Kevin Darcy > wrote:


allow-update + manual editing of zone file = bad.

Use nsupdate.
- Kevin


On 4/25/2014 4:03 PM, Jeronimo L. Cabral wrote:

Dear, I'm using Bind 9.8.4 with a master / slave scenario. Zone
transfer works OK when I have this config in named.conf.local
from master server, add some A records and execute "service bind9
reload":

zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
check-names ignore;

After that I add the allo-update statement and restart bind9 service:

zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
allow-update { 172.12.88.3; 10.8.91.7;};
check-names ignore;

Finally, I add some A records in my company.com.ar
 zone and increment the serial number,
then I execute "service bind9 reload" but the Slave doesn't
receive the new records. The only way Slave receives the new
records is when I execute "service bind9 restart" in Master which
is not the idea.

What is the problem please ???

Thanks a lot,

JeLo








___
Please visithttps://lists.isc.org/mailman/listinfo/bind-users  to 
unsubscribe from this list

bind-users mailing list
bind-users@lists.isc.org  
https://lists.isc.org/mailman/listinfo/bind-users



___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to
unsubscribe from this list

bind-users mailing list
bind-users@lists.isc.org 
https://lists.isc.org/mailman/listinfo/bind-users




___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Alan Clegg]

On 4/25/14, 4:29 PM, Jeronimo L. Cabral wrote:
> Thanks a lot, but using the allow-update statement, I use nsupdate in
> order to add a new record:
> 
> # nsupdate
>> server x.x.x.x
>>zone company.com.ar 
>>update add test.company.com.ar  86400 A 1.1.1.1
>>send
>>quit
> 
> But the master zone is not refreshed until I execute "service bind9
> restart" ("service bind9 reload" doesn't refresh the master zone).

Are you saying that the FILE is not updated?  Do you see zone transfers
taking place (ie, look in the log files).

> How can I do in order to add new records using nsupdate without
> restarting the bind9 service ???

"it just works" if everything is configured right.

AlanC



signature.asc
Description: OpenPGP digital signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Jeronimo L. Cabral]

Thanks a lot, but using the allow-update statement, I use nsupdate in order
to add a new record:

# nsupdate
> server x.x.x.x
>zone company.com.ar
>update add test.company.com.ar 86400 A 1.1.1.1
>send
>quit

But the master zone is not refreshed until I execute "service bind9
restart" ("service bind9 reload" doesn't refresh the master zone).

How can I do in order to add new records using nsupdate without restarting
the bind9 service ???

Thanks again !!!


On Fri, Apr 25, 2014 at 5:12 PM, Kevin Darcy  wrote:

>  allow-update + manual editing of zone file = bad.
>
> Use nsupdate.
> - Kevin
>
>
> On 4/25/2014 4:03 PM, Jeronimo L. Cabral wrote:
>
> Dear, I'm using Bind 9.8.4 with a master / slave scenario. Zone transfer
> works OK when I have this config in named.conf.local from master server,
> add some A records and execute "service bind9 reload":
>
>  zone "company.com.ar" {
> type master;
> file "/etc/bind/zones/company.com.ar.db";
> allow-transfer { key "company"; };
> check-names ignore;
>
>  After that I add the allo-update statement and restart bind9 service:
>
>  zone "company.com.ar" {
> type master;
> file "/etc/bind/zones/company.com.ar.db";
> allow-transfer { key "company"; };
> allow-update { 172.12.88.3; 10.8.91.7;};
> check-names ignore;
>
>  Finally, I add some A records in my company.com.ar zone and increment
> the serial number, then I execute "service bind9 reload" but the Slave
> doesn't receive the new records. The only way Slave receives the new
> records is when I execute "service bind9 restart" in Master which is not
> the idea.
>
>  What is the problem please ???
>
>  Thanks a lot,
>
>  JeLo
>
>
>
>
>
>
>
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
> from this list
>
> bind-users mailing 
> listbind-us...@lists.isc.orghttps://lists.isc.org/mailman/listinfo/bind-users
>
>
>
> ___
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Kevin Darcy]

allow-update + manual editing of zone file = bad.

Use nsupdate.
- Kevin

On 4/25/2014 4:03 PM, Jeronimo L. Cabral wrote:
Dear, I'm using Bind 9.8.4 with a master / slave scenario. Zone 
transfer works OK when I have this config in named.conf.local from 
master server, add some A records and execute "service bind9 reload":


zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
check-names ignore;

After that I add the allo-update statement and restart bind9 service:

zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
allow-update { 172.12.88.3; 10.8.91.7;};
check-names ignore;

Finally, I add some A records in my company.com.ar 
 zone and increment the serial number, then I 
execute "service bind9 reload" but the Slave doesn't receive the new 
records. The only way Slave receives the new records is when I execute 
"service bind9 restart" in Master which is not the idea.


What is the problem please ???

Thanks a lot,

JeLo








___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: Zone transfer doesn't work when I set allow-update statement

[Lyle Giese]

Allow-update makes the zone a dynamic update zone.  You have to stop 
hand editing the zone file.  Use nsupdate to make changes to the zone.


Lyle Giese
LCR Computer Services, Inc.

On 04/25/14 15:03, Jeronimo L. Cabral wrote:
Dear, I'm using Bind 9.8.4 with a master / slave scenario. Zone 
transfer works OK when I have this config in named.conf.local from 
master server, add some A records and execute "service bind9 reload":


zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
check-names ignore;

After that I add the allo-update statement and restart bind9 service:

zone "company.com.ar " {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
allow-update { 172.12.88.3; 10.8.91.7;};
check-names ignore;

Finally, I add some A records in my company.com.ar 
 zone and increment the serial number, then I 
execute "service bind9 reload" but the Slave doesn't receive the new 
records. The only way Slave receives the new records is when I execute 
"service bind9 restart" in Master which is not the idea.


What is the problem please ???

Thanks a lot,

JeLo








___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Zone transfer doesn't work when I set allow-update statement

[Jeronimo L. Cabral]

Dear, I'm using Bind 9.8.4 with a master / slave scenario. Zone transfer
works OK when I have this config in named.conf.local from master server,
add some A records and execute "service bind9 reload":

zone "company.com.ar" {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
check-names ignore;

After that I add the allo-update statement and restart bind9 service:

zone "company.com.ar" {
type master;
file "/etc/bind/zones/company.com.ar.db";
allow-transfer { key "company"; };
allow-update { 172.12.88.3; 10.8.91.7;};
check-names ignore;

Finally, I add some A records in my company.com.ar zone and increment the
serial number, then I execute "service bind9 reload" but the Slave doesn't
receive the new records. The only way Slave receives the new records is
when I execute "service bind9 restart" in Master which is not the idea.

What is the problem please ???

Thanks a lot,

JeLo
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users