help with notify

Mark Andrews marka at isc.org
Mon Apr 17 21:31:21 UTC 2023


The additional problem is that you also choose to hide the domain and the IP addresses which doesn’t help others test stuff for you. 

Why do you think named asked for the addresses of the servers?  What does named have and what does it need to send out notify messages?  Is the server properly configured so it can get what it needs? Can it talk to all the servers it needs too?  Is everything properly delegated? Are firewalls stopping it getting what it needs.

The address queries are just the first step in sending NOTIFY messages. The NOTIFY process starts with names but these need to be turned into addresses. 

Named includes a full iterative resolver. It uses that to get what it needs.

This should be enough for you to solve what is going wrong.
-- 
Mark Andrews

> On 18 Apr 2023, at 03:31, Matt Zagrabelny via bind-users <bind-users at lists.isc.org> wrote:
> 
> 
> Hello Ondřej,
> 
>> On Mon, Apr 17, 2023 at 9:26 AM Ondřej Surý <ondrej at isc.org> wrote:
>> 
>> > On 17. 4. 2023, at 15:59, Matt Zagrabelny via bind-users <bind-users at lists.isc.org> wrote:
>> > 
>> > Greetings bind-users,
>> > 
>> > I'm running a little older Debian bind:
>> > 
>> > bind9               1:9.9.5.dfsg-9
>> 
>> A little older?
> 
> Sure. I was trying to offer full disclosure while not bringing a lot of attention to how behind I am at work.
>  
> 
>> Debian Jessie reached EOL in June 2018, Debian Jessie LTS reached EOL in June 2020
> 
> ELTS is still going. I just enabled that repo. Thanks for the encouragement. 
> 
>> So, you are running software that hasn't received any update in 3-5 years.
>> 
>> Upgrade to current Debian stable, it has a fully-maintained up-to-date BIND 9.16 version
>> in security (1:9.16.37-1~deb11u1) and almost up-to-date BIND 9.18 in backports (the update
>> is currently blocked by the Debian being frozen for the next stable release).
> 
> I've been a happy Debian user since 3.0 Woody. Thanks for your contributions to it. I very much appreciate your time and effort.
> 
> Not sure if anyone is willing to look at my questions until I upgrade to a more recent BIND release. If so, I'd be grateful.
> 
> Thanks,
> 
> -m
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230418/d0302108/attachment-0001.htm>


More information about the bind-users mailing list