adding ipv6 to DNS allow zone transfers

Discussion in 'General' started by brody182, Jul 22, 2018.

  1. brody182

    brody182 Member

    get an error when I add ipv6, it works fine if I remove ipv6. How do I fix it?
    Code:
    allow-transfer {
        104.237.137.10;
        65.19.178.10;
        75.127.96.10;
        207.192.70.10;
        109.74.194.10;
        2600:3c00::a;
        2600:3c01::a;
        2600:3c02::a;
        2600:3c03::a;
        2a01:7e00::a;
     };
     also-notify {
        104.237.137.10;
        65.19.178.10;
        75.127.96.10;
        207.192.70.10;
        109.74.194.10;
        2600:3c00::a;
        2600:3c01::a;
        2600:3c02::a;
        2600:3c03::a;
        2a01:7e00::a;
     };
    
    Code:
     NSs have same SOA serial
    Looks like your nameservers do not agree on the SOA serial. Ths SOA records as reported by your nameservers:
    162.159.26.99 ->  2018072112
    162.159.24.25 ->  2018072110
    162.159.25.129 ->  2018072112
    162.159.24.39 ->  2018072111
    198.58.105.50 ->  2018072112
    162.159.27.72 ->  2018072111
    This can cause some serious problems that is why you should fix this asap. 
     
  2. ztk.me

    ztk.me ISPConfig Developer ISPConfig Developer

    have you by chance just added the ipv6 for the servers you already have in the list using ipv4? that could cause some unwanted updates?
     
  3. brody182

    brody182 Member

    nope, these servers are not mine, its from linode
     
  4. ztk.me

    ztk.me ISPConfig Developer ISPConfig Developer

    hmm I had a similar issue with ipv6 at some other provider a few years ago, issue was at one of their servers not really beeing capable of ipv6 or something dunno... try to contact linode aswell maybe
     
  5. brody182

    brody182 Member

    this is the error I'm getting , something to do with allowing recursive queries

    this only happens when I add IPV6 in (Allow zone transfers) and (Also Notify)
    intodns.com
    Code:
    You should not have nameservers that allow recursive queries as this will allow almost anyone to use your nameservers and can cause problems. Problem record(s) are:
    162.159.26.99
    162.159.24.39
    162.159.24.25
    162.159.27.72
    162.159.25.129
    
    bind error
    Code:
    Jul 27 00:54:01 server1 named[7476]: client 93.113.174.225#30239 (adobe.com): query (cache) 'adobe.com/A/IN' denied
    Jul 27 00:54:01 server1 named[7476]: client 93.113.174.225#37903 (adobe.com): query (cache) 'adobe.com/A/IN' denied
    Jul 27 01:49:50 server1 named[7476]: client 191.96.249.112#34900 (www.google.com): query (cache) 'www.google.com/ANY/IN' denied
    
     

Share This Page