Zone transfer problem

[Mark Andrews]

> On Tue, Nov 08, 2005 at 09:53:07AM -0000,
>  afaf <afaf.e at menara.ma> wrote 
>  a message of 62 lines which said:
> 
> > The primary server is able to load the zone file, and it allows zone
> > transfers.
> 
> Are you positive? You can be really sure by performing tests (computer
> science is, like physics, an experimental science, unlike, say,
> political science).
> 
> dig @primary-name-server SOA zone
> dig @primary-name-server AXFR zone
> 
> Post here the result of the tests (actual results, not stupid
> obfuscations) and we'll see.


	The problem is very simple.  BIND 4.9.3 is so old that it
	doesn't treat the "CNAME and other data" error as fatal.
	BIND 9 refuses to load the zone as it has a "CNAME and other
	data" error.

	Googling for "CNAME and other data" will give you hundreds
	of pages explaining the problem.

	The fix is to remove the "CNAME and other data" error from
	the zone.

	The simplest way to prevent this occuring again is to upgrade
	the master.  It is grossly out of date.

	Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org