Servers loading zones with lower serials

Barry Margolin barmar at alum.mit.edu
Thu Mar 26 00:44:58 UTC 2009


In article <gqaoi6$1j7t$1 at sf1.isc.org>, "Todd Snyder" <tsnyder at rim.com> 
wrote:

> Good day,
> 
> I saw some strange behaviour from BIND and am trying to understand it.
> 
> In one of the labs, someone mucked up a DNS change and made the serial
> lower than the previous version.  
> 
> Some of the nameservers complained:
> 
> Mar 23 15:07:24 ns1001 named[5913]: zone 5.1.10.in-addr.arpa/IN: serial
> number (2008030900) received from master 10.1.1.1#53 < ours (2008062600)
> 
> But some others just went ahead and loaded the zone anyways.

Were they masters or slaves?  Serial number checking is only done by 
slaves when checking whether they need to perform a zone transfer from 
the master.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list