SV: BIND9 master/slave - ixfr fails

[Ronni Jensen]

Hello again,

No, I don't have anything blocking port 53 at all. At the moment both servers are just placed on a local network for testing/setup. Though, I get these errors in /var/log/syslog when starting BIND on NS2:

Jan 23 11:00:39 NS2 named[7469]: starting BIND 9.2.4 -u bind
Jan 23 11:00:39 NS2 named[7469]: using 1 CPU
Jan 23 11:00:39 NS2 named[7471]: loading configuration from '/etc/bind/named.conf'
Jan 23 11:00:39 NS2 named[7471]: no IPv6 interfaces found
Jan 23 11:00:39 NS2 named[7471]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 23 11:00:39 NS2 named[7471]: listening on IPv4 interface eth0, 10.10.2.246#53
Jan 23 11:00:39 NS2 named[7471]: command channel listening on 127.0.0.1#953
Jan 23 11:00:39 NS2 named[7471]: zone 0.in-addr.arpa/IN: loaded serial 1
Jan 23 11:00:39 NS2 named[7471]: zone 127.in-addr.arpa/IN: loaded serial 1
Jan 23 11:00:39 NS2 named[7471]: zone 255.in-addr.arpa/IN: loaded serial 1
Jan 23 11:00:39 NS2 named[7471]: zone localhost/IN: loaded serial 1
Jan 23 11:00:39 NS2 named[7471]: running
Jan 23 11:00:39 NS2 named[7471]: dumping master file: data/m/tmp-XXXXeo8SQ5: open: file not found
Jan 23 11:00:39 NS2 named[7471]: transfer of 'mydomain.dk/IN' from 10.10.2.245#53: failed while receiving responses: file not found
Jan 23 11:00:39 NS2 named[7471]: transfer of 'mydomain.dk/IN' from 10.10.2.245#53: end of transfer

Any ideas? :)

Best Regards,
/jack


-----Oprindelig meddelelse-----
Fra: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] På vegne af Barry Margolin
Sendt: 21. januar 2006 05:59
Til: comp-protocols-dns-bind at isc.org
Emne: Re: BIND9 master/slave - ixfr fails

In article <dqrbbo$19na$1 at sf1.isc.org>,
 Ronni Jensen <ronnij at nejvel.com> wrote:

> Hello,
> 
> I am new on BIND dns, and have installed a master (ns1 - 10.10.2.245)
> and a slave (ns2 - 10.10.2.246) server - both BIND9.
> 
> On NS1 I have this in named.conf:
> 
> zone "mydomain.dk" {
>         type master;
>         file "data/m/mydomain.dk";
>         allow-transfer { 10.10.2.246; };
> };
> 
> On NS2 I have this:
> 
> zone "mydomain.dk" {
>         type slave;
>         file "data/m/mydomain.dk";
>         masters { 10.10.2.245; };
> };
> 
> 
> On NS1, the zonefile data/m/mydomain.dk exists, but I have not created
> it at NS2 - I am expecting NS2 to IXFR the zone from NS1 and store it
> in data/m/mydomain.dk also. Is that not correct?

The first time it will have to use AXFR -- IXFR is for getting changes 
since a previous snapshot, AXFR is for getting the whole zone.  But I 
don't think the distinction is relevant to your question.

> 
> Anyway; as it is configured at this moment, it doesn't work. If I do a
> nslookup on NS1, I get an answer correctly, but if I do the same on
> NS2, I just get this error:
> 
> ** server can't find mydomain.dk: SERVFAIL
> 
> 
> Can anyone please help me fix this issue? Thank you.

Do you have something blocking TCP port 53 connections from NS2 to NS1?

Are there any log messages on NS2 when it starts up, complaining about a 
failure trying to transfer the zone?

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***