Re: DNS Zone File Entries Limit

2012-11-15 Thread Mark Andrews
> Its there > > zone "rpz" { >type master; >file "/etc/bind/zones/rpz.db"; >allow-query { none; }; >allow-transfer { 10.0.0.1; }; > }; I asked: "The slave is making a SOA query to the master and is getting refused as as response. I would be checking your acls. Look at the logs

Re: DNS Zone File Entries Limit

2012-11-15 Thread Mark Andrews
In message <50a58610.8000...@blacklistthisdomain.com>, Silas Cutler writes: > No ACLs in place. > > [SLAVE] > Nov 15 19:13:36 [Redacted] named[21899]: zone rpz/IN: refresh: > unexpected rcode (REFUSED) from master MASTER#53 (source 0.0.0.0#0) > Nov 15 19:13:36 [Redacted] named[21899]: zone rpz/IN

Re: DNS Zone File Entries Limit

2012-11-15 Thread Silas Cutler
No ACLs in place. [SLAVE] Nov 15 19:13:36 [Redacted] named[21899]: zone rpz/IN: refresh: unexpected rcode (REFUSED) from master MASTER#53 (source 0.0.0.0#0) Nov 15 19:13:36 [Redacted] named[21899]: zone rpz/IN: Transfer started. Nov 15 19:13:36 [Redacted] named[21899]: transfer of 'rpz/IN' from MA

Re: DNS Zone File Entries Limit

2012-11-15 Thread Mark Andrews
In message <50a582d2.30...@blacklistthisdomain.com>, Silas Cutler writes: > Well, the authoritative server can handle the zone file size. However, > with the slave makes the request for the zone, I get: > > refresh: unexpected rcode (REFUSED) The slave is making a SOA query to the master and i

Re: DNS Zone File Entries Limit

2012-11-15 Thread Silas Cutler
Well, the authoritative server can handle the zone file size. However, with the slave makes the request for the zone, I get: refresh: unexpected rcode (REFUSED) On 11/15/12 6:59 PM, Mark Andrews wrote: > In message <50a580c1.9080...@blacklistthisdomain.com>, Silas Cutler writes: >> Good Evening

Re: DNS Zone File Entries Limit

2012-11-15 Thread Mark Andrews
In message <50a580c1.9080...@blacklistthisdomain.com>, Silas Cutler writes: > Good Evening, > > I've been doing some DNS RPZ experiments and during my testing I found > that if a DNS Zone on an Authoritative DNS Server has more then 100k > elements, it will not replicate to a slave DNS Server. >

DNS Zone File Entries Limit

2012-11-15 Thread Silas Cutler
Good Evening, I've been doing some DNS RPZ experiments and during my testing I found that if a DNS Zone on an Authoritative DNS Server has more then 100k elements, it will not replicate to a slave DNS Server. Do you know if this is a known issue or a PEBKAC related problem? Cheers, Silas Cutler