DNS is Non Authoritative

Mark_Andrews at isc.org Mark_Andrews at isc.org
Wed Aug 18 21:57:06 UTC 1999


> >>>>> "Rick" == Rick Gocher <rgocher at coptalk.com> writes:
> 
>     Rick> I have been going over this multiple times and have the main
>     Rick> domain resolving.  I added a new zone and it seems to load
>     Rick> ok from named.conf except nslookup fails with an Unspecified
>     Rick> error, and the message logs tells me the following after
>     Rick> failing nslookup.
> 
>     Rick> Aug 18 07:33:20 hostname named[21303]: unapproved AXFR from
>     Rick> [xxx.xxx.xxx.xxx].1187 for "domain.com" (not auth)
> 
> The message is clear enough. The name server on hostname rejected a
> zone transfer request for domain.com which came from port 1187 of IP
> address xxx.xxx.xxx.xxx. Looks like your name server is applying an
> access control list which doesn't let xxx.xxx.xxx.xxx do zone
> transfers.
> 
> 
	If that was the case it would have "(acl)" not "(not auth)".
	"(not auth)" is generated under two conditions.

		1. there was an error loading the zone.
		2. the zone is not served by the server.

	Mark
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list