Zone Transfer Problems: Windows 2003 Server to Linux Bind

Brenda Buttrick Brenda.Buttrick at biogenidec.com
Thu Sep 23 12:47:30 UTC 2004


To check if zone transfers is allowed on a W2k DNS Server:
        on the W2k DNS server--> right click on zone and select properties
                                     In the properties display:
                                        click on zones transfer tab
                                        check if the "allow zone 
transfers" is checked 
                                        verify slave servers for the zone 
is the server list or 
                                            if "Only to servers listed on 
the Name Servers tab" is checked, 
                                            verify your slave server is 
listed under the "Name Servers" tab
-Brenda
bind-users-bounce at isc.org wrote on 09/22/2004 11:45:20 AM:

> I am trying to re-establish a zone transfer with another organization
> that has just upgraded from Windows 2K to 2003.  I am using Bind 9.2.1
> on a Debain 3 system.  The transfer was working before but now I see
> this error since they have upgraded:
> 
> Sep 14 01:38:57 compt-ns3 named[18471]: transfer of 'occaudit
> .org.IN' from 192.169.140.12#53: resetting
> Sep 14 01:38:57 compt-ns3 named[18471]: transfer of 'occaudit.org/IN'
> from 192.1/
> 68.140.12#53:  failed while receiving responses:  REFUSED
> Sep 14 01:38:57 compt-ns3 named[18471]: transfer of 'occaudit.org/IN'
> from 192.1/
> 68.140.12#53: end of transfer 
> 
> When I do a dig occaudit.org @192.168.140.12 axfr I ger:
> 
> ; <<>> DiG 9.2.1 <<>> occaudit.org @192.168.140.12 axfr
> ;; global options:  printcmd
> ; Transfer failed
> 
> When I do a dig ml2.occaudit.org @192.168.140.12 I get the answer
> 
> ml2.occaudit.org.   3600   IN  A   192.168.140.12
> 
> So it looks to me like I can connect to their DNS server but they are
> not allowing zone transfers to my name server.  I have never used a
> Windows 2003 DNS server.  How do they set that so I can do my
> transfer?
> 
> Anybody know?
> 
> Thanks,
> 
> Brian
> 




More information about the bind-users mailing list