debug SERVFAIL

[Reindl Harald]

Am 02.10.2016 um 17:00 schrieb Per olof Ljungmark:
> On 2016-10-02 16:50, Reindl Harald wrote:
>>
>>
>> Am 02.10.2016 um 16:46 schrieb Per olof Ljungmark:
>>> What is the best way to debug a SERVFAIL problem? I have tried to ramp
>>> up the trace level a lot but that did not return anything useful.
>>>
>>> It is only one zone in question, namely the PTR for our external subnet.
>>> What puzzles me the most is that a secondary on the same subnet answers
>>> just fine for thesame query. All forwards zones resolves good as well.
>>>
>>> BIND version is 9.10.4-P3
>>
>> most likely some error in the zonefile, look at named logs
>>
>> that the secondary answers is normal because if the master refuses to
>> load a zone it never reaches the slave and start to fail there only when
>> it expires before the error is fixed
>>
>> hence master/slave while in most environemnts you could technically
>> generate the identical zone-files on all nameservers but then with the
>> same errors and so all would fail (in case of PTR and mailservers with
>> horrible results)
>
> There is nothing useful in the logs, hence my question above. The zone
> files are identical on master and slaves so I doubt there is a problem
> with that.

you need to provide the startup logs as well as the log-configuration