[Q]unapproved AXFR from XXXX .... (not zone top)

[Kevin Darcy]

Keejin Mo wrote:

> What is the log below?
>
>      Apr 19 13:50:43 intns named[13501]: unapproved AXFR from [165.243.17.15].48079
>      for "digital.lge.co.kr" (not zone top)
>
>     I have three chained DNS Server.
>    One is above log producing server (Let it A) which is the slave server
> for lge.co.kr domain.

But apparently it is *not* a master or slave for digital.lge.co.kr! The server needs to
be master or slave for that zone if other servers are to do zone transfers from it.

>    Another is the server has SOA for lge.co.kr domain and gives a delegation for
> digital.lge.co.kr sub-domain. (Let it B)
>
>    The other is the server delegated for digital.lge.co.kr sub-domain. (Let it C)
>
>    I can look the host "www.digital.lge.co.kr" up to IP Address correctly but couldn't
> find SOA for digital.lge.co.kr correctly.
>
> > www.digital.lge.co.kr
> Server:  intns.lg.co.kr
> Address:  165.243.17.15
>
> Non-authoritative answer:
> Name:    www.digital.lge.co.kr
> Address:  211.219.90.202
>
> >
>
> > digital.lge.co.kr
> Server:  intns.lg.co.kr
> Address:  165.243.17.15
>
> Authoritative answers can be found from:
> lge.co.kr
>         origin = prmns.lg.co.kr
>         mail addr = root.prmns.lg.co.kr
>         serial = 2001041701
>         refresh = 86400 (1D)
>         retry   = 3600 (1H)
>         expire  = 604800 (1W)
>         minimum ttl = 3600 (1H)
> >
>
> Why it said the SOA server is not digital.lge.co.kr (C) but prmns.lg.co.kr ?
> prmns.lg.co.kr is the forwarder server for the server "A"

The "origin" field of the SOA record is specified in the zone file. You can set it to any
syntactically-valid name you wish. It's not really used by anything except Dynamic
Update.

Note that the reason you received an SOA record as a response to the
"digital.lge.co.kr" query is because apparently that name does not exist (according to
the servers involved in answering the query). Is there an A record for digitial.lge.co.kr
defined in any zone file?


- Kevin