update forwarding denied

[Barry Finkel]

I wrote:

>> I am seeing messages like this one in the syslog of one of our BIND
>> 9.2,1 servers:
>> 
>>      Oct  2 20:34:34 thor.ctd.anl.gov named[301]:
>>        [ID 866145 daemon.error] client 192.111.36.4#63570:
>>        update forwarding denied
>> 
>> I have been unable to determine what this message means.  I do not see
>> the message on Cricket's site
>> 
>>      http://www.menandmice.com/docs/named_messages.htm
>> 
>> and I cannot seem to find the message in the BIND 9.2.1 source.
>> 
>> The IP address 
>> 
>>      192.111.36.4
>> 
>> translates to
>> 
>>      rf1.cuis.edu
>> 
>> and cuis.edu is a slave zone on this DNS server.  Can anyone help?
>> Thanks.

"Cricket Liu" <cricket at menandmice.com> replied:

>That message means that your slave name server received a dynamic
>update, which it normally would have forwarded to its master name
>server for the zone.  However, it didn't because either you didn't
>have an allow-update-forwarding substatement in the corresponding
>zone statement or the allow-update-forwarding substatement didn't
>allow forwarding updates from that IP address.

I have a two comments/questions:

1) I thought that BIND 8.2.5-REL (which I am running on the nameserver
   in question) did not forward DDNS requests sent to a slave server.
   I have no "allow-update-forwarding" statements in my named.conf
   file.

2) How do I determine the IP address of the machine that is sending
   the DDNS packet?  I am assuming that the IP address contained in the
   message is the address of the master nameserver for the zone that
   the DDNS packet is trying to update.
----------------------------------------------------------------------
Barry S. Finkel
Electronics and Computing Technologies Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 222, Room D209              Internet: BSFinkel at anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994