dig 9.9.[234] unable to do zone transfers from MS windows Domain Controllers

[Evan Hunt]

On Wed, Nov 20, 2013 at 09:46:40PM -0500, cypher Nix wrote:
> Bind 9.9.x is able to perform zone transfers from the Windows DC
> without any issue. Performing a named-checkzone against the zone file
> with bind 9.9.4 and bind 9.9.2 returns no errors. It looks like the
> issue is just with DIG 9.9.2 and 9.9.4 (possibly other versions of dig
> 9.9).
> 
> Has anyone ran into a similar issue? Any help would be greatly appreciated.

BIND 9.9 turns on EDNS(0) by default.  Try it with "dig +noedns" -- if
it works, then that was the problem.

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.