ID mismatch

[Mark Andrews]

> Hello,
> 
> one of our customers has his own primary DNS. We aren't able to transfer 
>   zone from him.
> 
> [root at kobyla etc]# dig @80.188.222.162 mikroregion-nymbursko.cz -t axfr
> 
> ; <<>> DiG 9.2.2 <<>> @80.188.222.162 mikroregion-nymbursko.cz -t axfr
> ;; global options:  printcmd
> mikroregion-nymbursko.cz. 86400 IN      SOA     gran.meu-nbk.cz. 
> admin.meu-nbk.cz. 2004091411 10800 3600 604800 86400
> ;; ERROR: ID mismatch: expected ID 56851, got 0
> 
> Unfortunately I don't know what remote system is. Ours are older RedHat 
> Linuxes, running Bind 9.2.2. Anybody knows what to do with it? 
> Suggestions are welcome, further information will be obtained. Thanks!
> 
> Pavel Urban
 
	DNS messages have a ID field in them.  This is supposed to be
	copied into the answer to allow them to be matched up with the
	question.  This is true for both TCP and UDP.  You can have
	multiple outstanding queries on a TCP connection.

	The master is a old system which doesn't copy the ID field into all
	of the messages in the AXFR stream.  It adds them to the starting
	SOA and finishing SOA (see below).

1483.   [bug]           dig axfr failed if the message id in the answer failed
                        to match that in the request.  Only the id in the first
                        message is required to match. [RT #8138]

	Mark
	
; <<>> DiG 9.3.0rc4 <<>> @80.188.222.162 mikroregion-nymbursko.cz -t axfr +add +comments +qr
;; global options:  printcmd
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38331
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38331
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	SOA	gran.meu-nbk.cz. admin.meu-nbk.cz. 2004091411 10800 3600 604800 86400

;; WARNING: ID mismatch: expected ID 38331, got 0
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	NS	ns2.tel.cz.

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	A	80.188.222.162

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	MX	10 mail.meu-nbk.cz.

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	NS	gran.meu-nbk.cz.

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
gran.mikroregion-nymbursko.cz. 86400 IN	A	80.188.222.162

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
www.mikroregion-nymbursko.cz. 86400 IN	A	80.188.222.165

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 0
;; flags: qr aa; QUERY: 0, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
ns.mikroregion-nymbursko.cz. 86400 IN	CNAME	gran.mikroregion-nymbursko.cz.

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38331
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; ANSWER SECTION:
mikroregion-nymbursko.cz. 86400	IN	SOA	gran.meu-nbk.cz. admin.meu-nbk.cz. 2004091411 10800 3600 604800 86400

;; Query time: 1368 msec
;; SERVER: 80.188.222.162#53(80.188.222.162)
;; WHEN: Wed Sep 15 22:58:39 2004
;; XFR size: 9 records (messages 9)

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org