Problem-In-TranferingZone
Ejaz
mejaz at cyberia.net.sa
Sun Dec 6 09:50:31 UTC 2015
Sorry for that. Thanks for your reply.. below are the details.
My config
//
// named.conf
options {
listen-on port 53 { 127.0.0.1; 1.1.1.1;};
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
masterfile-format text;
// allow-query { localhost; };
transfers-out 5000 ;
allow-transfer { myslave server ip;};
allow-query {127.0.0.0/8;.;}
;
/*
- If you are building an AUTHORITATIVE DNS server, do NOT enable recurs
ion.
- If you are building a RECURSIVE (caching) DNS server, you need to ena
ble
recursion.
- If your recursive DNS server has a public IP address, you MUST enable
access
control to limit queries to your legitimate users. Failing to do so w
ill
cause your server to become part of large scale DNS amplification
attacks. Implementing BCP38 within your network would greatly
reduce such attack surface
*/
recursion yes;
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
I wanted to see all the transferred zones from master server to the slave should be readable format. Instead of raw…
Few logs entries from the slave server
ords, 0 bytes, 0.005 secs (0 bytes/sec)
Dec 6 13:24:26 ns10 named[2202]: transfer of 'alinmaipo.com/IN' from 212.93.192.4#53: failed while receiving responses: REFUSED
Dec 6 13:24:26 ns10 named[2202]: transfer of 'alinmaipo.com/IN' from 212.93.192.4#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.005 secs (0 bytes/sec)
Dec 6 13:24:26 ns10 named[2202]: zone mustafa.com/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
6 13:24:23 ns10 named[2202]: transfer of 'alinmainvestment.com/IN' from 212.93.192.4#53: connected using 212.119.93.5#45083
Dec 6 13:24:23 ns10 named[2202]: transfer of 'alahlitrade.com/IN' from 212.93.192.4#53: connected using 212.119.93.5#40208
Dec 6 13:24:23 ns10 named[2202]: transfer of 'alinmainvestment.com/IN' from 212.93.192.4#53: failed while receiving responses: REFUSED
Dec 6 13:24:23 ns10 named[2202]: transfer of 'alinmainvestment.com/IN' from 212.93.192.4#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.003 secs (0 bytes/sec)
Dec 6 13:24:23 ns10 named[2202]: transfer of 'alahlitrade.com/IN' from 212.93.192.4#53: failed while receiving responses: REFUSED
Dec 6 13:24:23 ns10 named[2202]: transfer of 'alahlitrade.com/IN' from 212.93.192.4#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.004 secs (0 bytes/sec)
Dec 6 13:24:23 ns10 named[2202]: zone ejaz.com/IN: refresh: unexpected rcode (REFUSED) from master 212.119.64.6#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: zone ejaz.com/IN: Transfer started.
Dec 6 13:24:23 ns10 named[2202]: zone amoudico.com/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: zone c-r.com.sa/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: zone intawana.net/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: transfer of 'ejaz.com/IN' from 212.119.64.6#53: connected using 212.119.93.5#42454
Dec 6 13:24:23 ns10 named[2202]: zone smc-groups.com/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: zone tsf.com.sa/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]: zone cepcomed.com.com/IN: refresh: non-authoritative answer from master 212.119.92.5#53 (source 0.0.0.0#0)
Dec 6 13:24:23 ns10 named[2202]:
Master server
[root at ns6 named]# named -v
BIND 9.9.8 (Extended Support Version) <id:2d6d4ba>
Slave server
[root at ns10 named]# named -v
BIND 9.9.4-RedHat-9.9.4-29.el7 (Extended Support Version)
I am trying to retrieve all the zones together from the master. Did not copied from the old serer
Ejaz
-----Original Message-----
From: Anand Buddhdev [mailto:anandb at ripe.net]
Sent: Sunday, December 6, 2015 12:29 PM
To: Ejaz <mejaz at cyberia.net.sa>; bind-users at lists.isc.org
Subject: Re: Problem-In-TranferingZone
On 06/12/15 06:59, Ejaz wrote:
Hi Ejaz,
> I have implemented new slave server and wanted to get all the 2000
> zones from primary/master server to the new slave one. But zone file
> some time comes with empty records and sometimes appears as below,
> Any idea Would be highly appreciated.
You have not provided even a single piece of detail about your configuration, such as how you tried to copy the zones from the master to the slave. Did you use scp or sync? Did you configure the slave to do zone transfer? We can't read your mind.
If you want help, please ask some better questions, and provide:
1. Your configuration
2. What you expected to see
3. Log snippets from your slave server
4. Your BIND version
5. Any other relevant information about what commands you typed, etc
Regards,
Anand
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20151206/7f78c1e0/attachment-0001.html>
More information about the bind-users
mailing list