Audit the consistency of zone files on DNS servers

Stephane Bortzmeyer bortzmeyer at nic.fr
Fri Mar 14 13:11:34 UTC 2014


On Fri, Mar 14, 2014 at 12:33:47PM +0000,
 Phil Mayers <p.mayers at imperial.ac.uk> wrote 
 a message of 25 lines which said:

> dig @server zone axfr >file
> diff file file.real

diff is not clever enough, you'll find many spurious differences. Try
feeding the two files (the local one and the AXFRed one) through
named-compilezone to canonicalize them.

(I actually use a non-BIND tool, ldns-read-zone)

http://www.bortzmeyer.org/canonicalize-zones.html


More information about the bind-users mailing list