Am getting errors with my zone files. Any pointers?

Brad Knowles brad.knowles at skynet.be
Fri Jul 13 06:29:55 UTC 2001


At 12:19 AM +0000 7/13/01, Dan Du Vall wrote:

>  Jul 12 16:48:58 quadlinux named[970]: Zone "quadtrax.net" (file
>  db.quadtrax.net): No default TTL ($TTL <value>) set, using SOA minimum
>  instead

	Make sure that you use a "$TTL" directive at the top of the zone file.

>  Jul 12 16:48:58 quadlinux named[970]: db.quadtrax.net: WARNING SOA refresh
>  value is less than 2 * retry (3600 < 3600 * 2)

	Also ensure that your SOA refresh is at least 3-4 times the 
length of your retry.

>  Jul 12 16:48:58 quadlinux named[970]: Zone "115.216.216.in-addr.arpa" (file
>  quadtrax.net.rev): No default TTL ($TTL <value>) set, using SOA minimum
>  instead

	Use "$TTL".

>  Jul 12 16:48:58 quadlinux named[970]: quadtrax.net.rev:13: data
>  "27.115.216.216.in-addr.arpa.216.216.in-addr.arpa" outside zone
>  "115.216.216.in-addr.arpa" (ignored)
>  Jul 12 16:48:58 quadlinux named[970]: quadtrax.net.rev:14: data
>  "27.115.216.216.in-addr.arpa.216.216.in-addr.arpa" outside zone
>  "115.216.216.in-addr.arpa" (ignored)
>  Jul 12 16:48:58 quadlinux named[970]: quadtrax.net.rev:15: data
>  "27.115.216.216.in-addr.arpa.216.216.in-addr.arpa" outside zone
>  "115.216.216.in-addr.arpa" (ignored)
>  Jul 12 16:48:58 quadlinux named[970]: quadtrax.net.rev:16: data
>  "27.115.216.216.in-addr.arpa.216.216.in-addr.arpa" outside zone
>  "115.216.216.in-addr.arpa" (ignored)

	You need a trailing dot at the end of 
"27.115.216.216.in-addr.arpa" in this zone file, otherwise BIND will 
add ".216.216.in-addr.arpa" to the end for you.

>  Jul 12 16:49:10 quadlinux named[971]: sysquery: findns error (NXDOMAIN) on
>  ns1.granitecanyon.com.quadtrax.net?
>  Jul 12 16:49:10 quadlinux named[971]: sysquery: findns error (NXDOMAIN) on
>  ns2.granitecanyon.com.quadtrax.net?

	Again, you need a trailing dot -- this time at the end of 
"ns2.granitecanyon.com", otherwise BIND will add ".quadtrax.net" for 
you.


	All of these problems would probably be found if you were using 
BIND 9 instead of BIND 8, and used the "named-checkzone" program 
which comes with BIND, in order to check the syntax of your zone 
files.


	As an adjunct, here's what the latest version of "doc" has to say 
about your zone:

% doc -d quadtrax.net.
Doc-2.2.2: doc -d quadtrax.net.
Doc-2.2.2: Starting test of quadtrax.net.   parent is net.
Doc-2.2.2: Test date - Fri Jul 13 02:25:39 EDT 2001
DEBUG: digging @a.gtld-servers.net. for soa of net.
soa @a.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @b.gtld-servers.net. for soa of net.
soa @b.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @c.gtld-servers.net. for soa of net.
soa @c.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @d.gtld-servers.net. for soa of net.
soa @d.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @e.gtld-servers.net. for soa of net.
soa @e.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @f.gtld-servers.net. for soa of net.
soa @f.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @g.gtld-servers.net. for soa of net.
soa @g.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @h.gtld-servers.net. for soa of net.
soa @h.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @i.gtld-servers.net. for soa of net.
soa @i.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @j.gtld-servers.net. for soa of net.
soa @j.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @k.gtld-servers.net. for soa of net.
soa @k.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @l.gtld-servers.net. for soa of net.
soa @l.gtld-servers.net. for net. has serial: 2001071200
DEBUG: digging @m.gtld-servers.net. for soa of net.
soa @m.gtld-servers.net. for net. has serial: 2001071200
SOA serial #'s agree for net. domain
Found 3 NS and 3 glue records for quadtrax.net. @a.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @b.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @c.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @d.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @e.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @f.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @g.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @h.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @i.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @j.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @k.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @l.gtld-servers.net. (non-AUTH)
Found 3 NS and 3 glue records for quadtrax.net. @m.gtld-servers.net. (non-AUTH)
DNServers for net.
    === 0 were also authoritatve for quadtrax.net.
    === 13 were non-authoritative for quadtrax.net.
Servers for net. (not also authoritative for quadtrax.net.)
    === agree on NS records for quadtrax.net.
DEBUG: domserv = ns.quadtrax.net. ns1.granitecanyon.com. ns2.granitecanyon.com.
NS list summary for quadtrax.net. from parent (net.) servers
   == ns.quadtrax.net. ns1.granitecanyon.com. ns2.granitecanyon.com.
digging @ns.quadtrax.net. for soa of quadtrax.net.
soa @ns.quadtrax.net. for quadtrax.net. serial: 2001070901
digging @ns1.granitecanyon.com. for soa of quadtrax.net.
soa @ns1.granitecanyon.com. for quadtrax.net. serial:
ERROR: no SOA record for quadtrax.net. from ns1.granitecanyon.com.
digging @ns2.granitecanyon.com. for soa of quadtrax.net.
soa @ns2.granitecanyon.com. for quadtrax.net. serial:
ERROR: no SOA record for quadtrax.net. from ns2.granitecanyon.com.
NS list from quadtrax.net. authoritative servers matches list from
   === parent (net.) servers not authoritative for quadtrax.net.
Checking 1 potential addresses for hosts at quadtrax.net.
   == 216.216.115.27
in-addr PTR record found for 216.216.115.27
Summary:
    ERRORS found for quadtrax.net. (count: 2)
Done testing quadtrax.net.  Fri Jul 13 02:25:50 EDT 2001

	And now, "dnswalk":

% nswalk -alF quadtrax.net.
Checking quadtrax.net.
Getting zone transfer of quadtrax.net. from ns.quadtrax.net...done.
SOA=ns.quadtrax.net     contact=sysop.quadtrax.com
BAD: quadtrax.net NS ns1.granitecanyon.com: lame NS delegation
BAD: quadtrax.net NS ns2.granitecanyon.com: lame NS delegation
0 failures, 0 warnings, 2 errors.


	Finally, the output from DNS Expert Professional 1.6 from Men & Mice:

                               DNS Expert
                   Detailed Report for quadtrax.net.
         7/13/01, 8:29 AM, using the analysis setting "Minimal"
======================================================================

Information
----------------------------------------------------------------------
Serial number:           2001070901
Primary name server:     ns.quadtrax.net.
Primary mail server:     mail.quadtrax.net.
Number of records:       8 (3 NS, 1 MX, 4 A, 0 CNAME, 0 PTR, 0 Other)


Errors
----------------------------------------------------------------------
o The server "ns2.granitecanyon.com." did not reply
     The server "ns2.granitecanyon.com." did not reply when it was
     queried for the name "quadtrax.net.".  This indicates that the
     server is not running, or it is currently unreachable.

o Non-authoritative data received from the server
   "ns1.granitecanyon.com."
     The server "ns1.granitecanyon.com." is listed as being
     authoritative for the domain, but it does not contain
     authoritative data for it.


Warnings
----------------------------------------------------------------------
o The zone contains no A record with the zone name
     There is no A record in the zone with the zone name
     "quadtrax.net."


----------------------------------------------------------------------
end of report

-- 
Brad Knowles, <brad.knowles at skynet.be>

/*        efdtt.c  Author:  Charles M. Hannum <root at ihack.net>          */
/*       Represented as 1045 digit prime number by Phil Carmody         */
/*     Prime as DNS cname chain by Roy Arends and Walter Belgers        */
/*                                                                      */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob        */
/*   where title-key = "153 2 8 105 225" or other similar 5-byte key    */

dig decss.friet.org|perl -ne'if(/^x/){s/[x.]//g;print pack(H124,$_)}'


More information about the bind-users mailing list