How to query the "incoming" serial of a zone while inline signing

Klaus Darilion klaus.mailinglists at pernau.at
Thu Jan 30 13:28:18 UTC 2014



On 30.01.2014 14:19, Mark Andrews wrote:
> In message <52EA4C56.5060206 at pernau.at>, Klaus Darilion writes:
>> Hi!
>>
>> I use Bind for inline signing between a hidden master and the public
>> slaves. AFAIS Bind maintains 2 serials: one for the incoming unsigned
>> zone (eg. used to match incoming NOTIFYs) and one for the outgoing
>> signed zone.
>>
>> I want to monitor if my name servers are all up2date by monitoring and
>> comparing the serial. This works to compare the serial of the public
>> slave with the outgoing serial of Bind. But if I want to know if Bind is
>> in sync with the hidden master, I somehow have to find out the
>> "incoming" serial of Bind.
>>
>> Are there any tools/ways to query Bind for the incoming serial?
>
> 	rndc zonestatus <zone> [class [view]]

AFAIS this is only supported with bind 9.10.

Any tricks for stable bind (9.9.4)?

Thanks
Klaus


More information about the bind-users mailing list