Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
I have now tried recreating the zone file on the master, removed and re-added the configuration for the zone on both master and slave, yet still I am unable to transfer the zone. I have also added the following logging to the master server: logging { channel xfer { file "/

Re: which end does the problem exist?

2013-12-19 Thread Lawrence K. Chen, P.Eng.
On 2013-12-19 14:54, /dev/rob0 wrote: On Thu, Dec 19, 2013 at 02:48:59PM -0600, Lawrence K. Chen, P.Eng. wrote: Got reports that users are unable to send mail to usda.gov sites using our campus SMTP server (where we have usda.gov sites on campus.) The users have said they were able to send u

Re: which end does the problem exist?

2013-12-19 Thread /dev/rob0
On Thu, Dec 19, 2013 at 02:48:59PM -0600, Lawrence K. Chen, P.Eng. wrote: > Got reports that users are unable to send mail to usda.gov > sites using our campus SMTP server (where we have usda.gov > sites on campus.) > > The users have said they were able to send using other servers > like Googl

which end does the problem exist?

2013-12-19 Thread Lawrence K. Chen, P.Eng.
Got reports that users are unable to send mail to usda.gov sites using our campus SMTP server (where we have usda.gov sites on campus.) The users have said they were able to send using other servers like Google and Microsoft. When I look at my system, its unable to resolve the domain name. D

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
On 19/12/13 19:44, David Forrest wrote: > This is an unrouteable private zone. I slave root as you appear to do > and serve your own 5.168.192.in-addr.arpa. as I do. I don't expect it > to transfer out as it only has meaning in an internal view. > > Dave I'm not expecting the zone to transfer

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
On 19/12/13 19:37, /dev/rob0 wrote: > How about when the zone loaded initially? I suspect a problem in the > master zone file itself. Try named-checkzone(8) on it. > named-checkzone seems to be happy: zone 5.168.192.in-addr.arpa/IN: loaded serial 1234478001 OK > Can you query SOA and PTR records

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread David Forrest
On Thu, 19 Dec 2013, Daniel Lintott wrote: (...) ;; ANSWER SECTION: 5.168.192.in-addr.arpa. 38400 IN SOA server1.internal.serverb.co.uk. daniel.serverb.co.uk. 1234478001 10800 3600 604800 38400 ;; AUTHORITY SECTION: 5.168.192.in-addr.arpa. 38400 IN NS server1.internal.ser

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread /dev/rob0
On Thu, Dec 19, 2013 at 07:27:51PM +, Daniel Lintott wrote: > On 19/12/13 18:37, Timothe Litt wrote: > > I doubt you'll get help without providing configuration data for > > master > > and slaves and exact log and error messages. > > > > But I'll take one blind guess. DNSSEC validation enabl

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
On 19/12/13 18:50, Matus UHLAR - fantomas wrote: > Does the master answer SOA requests for all requests correctly? It would appear so, yes: dig @192.168.5.1 5.168.192.in-addr.arpa SOA ; <<>> DiG 9.9.4-P1 <<>> @192.168.5.1 5.168.192.in-addr.arpa SOA ; (1 server found) ;; global options: +cmd ;; G

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
On 19/12/13 18:37, Timothe Litt wrote: > I doubt you'll get help without providing configuration data for > master > and slaves and exact log and error messages. > > But I'll take one blind guess. DNSSEC validation enabled and your > in-addr.arpa zones are not delegated and not in DLV? > DNSS

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Matus UHLAR - fantomas
On 19.12.13 18:11, Daniel Lintott wrote: I have two BIND DNS servers both running 9.9.4-P1. I have configured them as master and slave, but have a strange issue. The IPv4 reverse zone, fails to transfer to the slave. I have tested the AXFR from the command line and this also fails with SERVFAIL

Re: Unable to transfer IPv4 reverse zone

2013-12-19 Thread Timothe Litt
I doubt you'll get help without providing configuration data for master and slaves and exact log and error messages. But I'll take one blind guess. DNSSEC validation enabled and your in-addr.arpa zones are not delegated and not in DLV? In my configuration IPv4 Reverse zones (which are DNSSEC

Unable to transfer IPv4 reverse zone

2013-12-19 Thread Daniel Lintott
Hi, I have two BIND DNS servers both running 9.9.4-P1. I have configured them as master and slave, but have a strange issue. The IPv4 reverse zone, fails to transfer to the slave. I have tested the AXFR from the command line and this also fails with SERVFAIL. Out of 5 zones (3 forward, 1 IPv6 r

RE: missing ‘additional section’

2013-12-19 Thread houguanghua
Dear Steve, In my first dig, no matter that recursion was enabled or not, 'addtional section' was returned. In my second dig, no matter that recursion was enabled or not, 'addtional section' was not returned. What's the different between the two times of dig is as follows: --the first server i

Re: Re: missing ‘additional section’

2013-12-19 Thread Mark Andrews
In message <31fecd06-03b0-4efa-a6d8-91e6c2242...@ucd.ie>, "Niall O'Reilly" writ es: > > On 18 Dec 2013, at 15:19, houguanghua wrote: > > > Is there any way to enable the Additional Section? Thanks. > > The server sends data in the additional section if either > (a) these data are r

Re: missing ‘additional section’

2013-12-19 Thread Niall O'Reilly
On 18 Dec 2013, at 15:19, houguanghua wrote: > Is there any way to enable the Additional Section? Thanks. The server sends data in the additional section if either (a) these data are required, or (b) the server supports and is configured to send data which, although not