HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=27)
-   -   mydns zonetransfer to bind (http://www.howtoforge.com/forums/showthread.php?t=37727)

sCHween 25th July 2009 12:36

mydns zonetransfer to bind
 
Hi all

First of all i want to thanks for this page - well done =)

Yesterday we installed Centos 5.3 and ISPConfig3.
As we get out of the howtos, we have to install mydns-ng - as we did!

No the problem we got:
First NS is our server. Second and third is an outstanding one - means
we don't have the possibility to change anything. We got a login to create
the zone which should be transferd - and that's it.

So as we testet we just created the zone and pressed apply - zone transfer worked fine.
Few minutes ago, we created a cname - and we are still waiting that this
cname will be transfered.

if i check it with www.intodns.com i receive the following error

x5 is the master (mydns) and x9 / 1x are the slaves (bind)

Code:

Looks like your nameservers do not agree on the SOA serial. Ths SOA records as reported by your nameservers:
87.118.xxx.x9 ->  2009072505
94.230.xxx.x5 ->  2009072507
87.118.xxx.1x ->  2009072505
This can cause some serious problems that is why you should fix this asap.

Code:

[root@boss ~]# mydns -d -v
mydns[12681]: AXFR is enabled
mydns[12681]: TCP ports are enabled
mydns[12681]: DNS UPDATE is enabled
mydns[12681]: DNS NOTIFY is enabled
mydns[12681]: DNS IXFR is not enabled
mydns[12681]: optional 'xfer' column found in 'dns_soa' table
mydns[12681]: mydns 1.2.8.27 started Sat Jul 25 12:09:42 2009 (listening on 3 addresses)

Contents of mydns.conf:
Code:

##
##  /etc/mydns.conf
##  Thu Aug  2 16:36:26 2007
##  For more information, see mydns.conf(5).
##


                                # DATABASE INFORMATION

db-host = localhost            # SQL server hostname
db-user = ispconfig            # SQL server username
db-password = c92b68df4c01f1b846dab669d6477ed7        # SQL server password
database = dbispconfig          # MyDNS database name


                                # GENERAL OPTIONS

user = nobody                  # Run with the permissions of this user
group = nogroup                # Run with the permissions of this group
listen = *                      # Listen on these addresses ('*' for all)
no-listen =                    # Do not listen on these addresses


                                # CACHE OPTIONS

zone-cache-size = 2048  # Maximum number of elements stored in the zone cache
zone-cache-expire = 60  # Number of seconds after which cached zones expires
reply-cache-size = 2048 # Maximum number of elements stored in the reply cache
reply-cache-expire = 30 # Number of seconds after which cached replies expire


                                # ESOTERICA

log = LOG_DAEMON        # Facility to use for program output (LOG_*/stdout/stderr)
pidfile = /var/run/mydns.pid    # Path to PID file
timeout = 120  # Number of seconds after which queries time out
multicpu = 1    # Number of CPUs installed on your system
recursive =                    # Location of recursive resolver
allow-axfr = yes # Should AXFR be enabled?
allow-tcp = yes  # Should TCP be enabled?
allow-update = yes      # Should DNS UPDATE be enabled?
ignore-minimum = no    # Ignore minimum TTL for zone?
soa-table = dns_soa    # Name of table containing SOA records
rr-table = dns_rr      # Name of table containing RR data
soa-where = server_id = 1              # Extra WHERE clause for SOA queries
rr-where =  server_id = 1              # Extra WHERE clause for RR queries
use-soa-active = yes # To fix bug 295 where active or inactive status is ignored.
use-rr-active = yes# To fix bug 295 where active or inactive status is ignored.
notify-enabled = yes

dig with type AXFR:
Code:

[root@boss ~]# dig @94.230.xxx.x5 axfr domain.to

; <<>> DiG 9.3.4-P1 <<>> @94.230.xxx.x5 axfr domain.to
; (1 server found)
;; global options:  printcmd
domain.to.              86400  IN      SOA    ns1.domain.to. root.domain.to. 2009072531 28800 7200 604800 86400
boss.domain.to.          86400  IN      A      94.230.xxx.x5
ftp.domain.to.          86400  IN      A      94.230.xxx.x5
mail.domain.to.          86400  IN      A      94.230.xxx.x5
ns1.domain.to.          86400  IN      A      94.230.xxx.x5
domain.to.              86400  IN      A      94.230.xxx.x5
domain.to.              86400  IN      MX      10 mail.domain.to.
domain.to.              86400  IN      NS      ns1.domain.to.
domain.to.              86400  IN      NS      ns2.wwwroot.to.
domain.to.              86400  IN      NS      ns3.wwwroot.to.
www.domain.to.          86400  IN      A      94.230.xxx.x5
domain.to.              86400  IN      SOA    ns1.domain.to. root.domain.to. 2009072531 28800 7200 604800 86400
;; Query time: 7 msec
;; SERVER: 94.230.xxx.x5#53(94.230.xxx.x5)
;; WHEN: Sat Jul 25 12:28:45 2009
;; XFR size: 12 records (messages 12)

[root@boss ~]# dig @87.118.xxx.x9 axfr domain.to

; <<>> DiG 9.3.4-P1 <<>> @87.118.xxx.x9 axfr domain.to
; (1 server found)
;; global options:  printcmd
domain.to.              86400  IN      SOA    ns1.domain.to. root.domain.to. 2009072512 28800 7200 604800 86400
domain.to.              86400  IN      NS      ns1.domain.to.
domain.to.              86400  IN      NS      ns2.wwwroot.to.
domain.to.              86400  IN      NS      ns3.wwwroot.to.
domain.to.              86400  IN      A      94.230.xxx.x5
domain.to.              86400  IN      MX      10 mail.domain.to.
ftp.domain.to.          86400  IN      A      94.230.xxx.x5
mail.domain.to.          86400  IN      A      94.230.xxx.x5
ns1.domain.to.          86400  IN      A      94.230.xxx.x5
www.domain.to.          86400  IN      A      94.230.xxx.x5
domain.to.              86400  IN      SOA    ns1.domain.to. root.domain.to. 2009072512 28800 7200 604800 86400
;; Query time: 19 msec
;; SERVER: 87.118.xxx.x9#53(87.118.xxx.x9)
;; WHEN: Sat Jul 25 12:27:18 2009
;; XFR size: 11 records (messages 1)

Entries are still not updated - even when i restart mydns-ng :(

I hope anyone could help, cause we don't have any idea to fix this issue :)

Thanks for the fish

sCHween 25th July 2009 12:53

i found something strange =)

Code:

SOA          Info          SOA record        The SOA record is:
Primary nameserver: ns1.domain.to
Hostmaster E-mail address: root.domain.to
Serial #: 2009072512
Refresh: 28800
Retry: 7200
Expire: 604800  1 weeks
Default TTL: 86400

Error        NSs have same SOA serial        Looks like your nameservers do not agree on the SOA serial. Ths SOA records as reported by your nameservers:
87.118.xxx.xx9 ->  2009072512
94.230.xxx.x5 ->  2009072531
87.118.xxx.1x ->  2009072512
This can cause some serious problems that is why you should fix this asap.

ns1 is the 04.230.xxx.x5 so i expected that the id from ns1 and 94 will be the same *mmh*

falko 26th July 2009 12:42

Maybe the other nameservers are caching...

sCHween 27th July 2009 16:46

it seems not =)

bind to bind transfer on this server works without troubles!

voidzero 9th August 2009 19:26

We are suffering from the same problem!

sCHween 9th August 2009 20:06

we solved it by adding this lines to the bind config:

HTML Code:

server 94.230.xxx.x5 {
request-ixfr no;
};



All times are GMT +2. The time now is 17:53.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.