slow IXFR updates
Rainer Duffner
rainer at ultra-secure.de
Tue Aug 22 19:32:08 UTC 2006
Chris Buxton wrote:
> Sounds to me like a problem with DNS notify. Is the customer
> correctly referencing your name server in an NS record in each of his
> zones?
>
I looked at this and it seemed OK.
> As a quick and dirty workaround, have the customer add the following
> to his options statement:
>
> also-notify { ip-addr; };
>
> where "ip-addr" is the IP address of your name server. If he already
> has an also-notify substatement, have him instead add your name
> server to the existing list. Note that this can be overridden in each
> zone statement, so if he has also-notify substatements in his zone
> statements, he'll need to modify those instead.
>
I didn't do this (yet), but when someone else told me how to enable
logging (which I couldn't find any quick info about, when browsing
through the admin-manual), I saw that the notifies came from a host that
is not one of the two primaries.
At least BIND said so.
whois(1) still list the two "main" DNS-servers (where our 2ndary can do
AXFRs from) as primaries, so I believe this is an error in the customers
firewall-configuration. Some broken bi-directional NAT setting or so.
Unfortunately, we probably cannot bill all the lost time and nerves to
them ;-)
Still, thanks for your help.
Best Regards
Rainer
More information about the bind-users
mailing list