inline-signing: SOA serial out of sync

Stefan Förster cite at incertum.net
Thu Jun 21 06:18:11 UTC 2018


Hi,

* Axel Rau <Axel.Rau at Chaos1.DE>:
>Occasionally it happens after rndc reload that the serial in the zone file is bigger than that in served SOA.
>In this case, named begins serving stale data.
>Probability for this to happen increases with size of the journal file.

I used to see something similar (although views were involved), where 
BIND was not picking up changes to a zone when only included files were 
changed:

https://lists.isc.org/pipermail/bind-users/2017-September/099145.html

The setup then was something like:

<master zone>
[data]
$INCLUDE "ns.include"

<ns.include>
@ IN NS ...
@ IN NS ...

If needed, I can provide the real zone data. I didn't encounter this 
problem again after I quit using views.


Cheers,
Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 898 bytes
Desc: not available
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20180621/5b1bdcf5/attachment.bin>


More information about the bind-users mailing list