not zone top???

[Mark_Andrews at isc.org]

	You can't have a CNAME at the top of a zone.

	i.e.
		psk.net.        IN      CNAME   carrie

	Also nameserver are not allowed to refer to cnames.

	i.e.
		ns1             IN      CNAME retribution

	Mark
> 
> I currently have the following configuration:
> 
> Primary DNS Running Bind 8.1.2 on Solaris 2.6
> Secondary DNS Running 8.2.1 on OpenBSD 2.5
> 
> Setting up DNS (Secondary) to transfer zones from DNS (primary), I'm
> getting the following error on the primary:
> 
> 
> Aug 27 00:01:23 carrie named[166]: unapproved AXFR from
> [206.153.116.21].13172 for "carrie.psk.net" (not zone top)
> 
> The secondary shows the following log message:
> 
> Aug 27 00:28:15 retribution named-xfer[20191]:
> [[206.153.116.21].13172] transfer refused from [206.153.116.8], zone
> psk.net
> 
> The Zone files won't  transfer. What could be the problem? I can't
> figure it out.. Driving me nuts.
> 
> Any help would be greatly appreciated!
> 
> psk at psk.net
> 
> The primary named.conf file reads as follows:
> 
> 
> /*
>  * A simple BIND 8 configuration
>  */
> 
> options {
>         directory "/var/named";
>         allow-transfer { 206.153.116.21; };
> };
> 
> zone "psk.net" in {
>         type master;
>         file "db.psk.net";
>         allow-transfer { 206.153.116.21; };
> };
> 
> zone "116.153.206.in-addr.arpa" in {
>         type master;
>         file "db.206.153.116";
>         allow-transfer { 206.153.116.21; };
> };
> 
> zone "0.0.127.in-addr.arpa" in {
>         type master;
>         file "db.127.0.0";
>         allow-transfer { 206.153.116.21; };
> };
> 
> zone "." in {
>         type hint;
>         file "db.cache";
> };
> 
> ############################
> db.psk.net reads as follows:
> ############################
> 
> 
> 
> @ IN SOA carrie.psk.net. psk.carrie.psk.net. (
>         1999082601      ; Serial
>         10800   ; Refresh
>         3600    ; Retry
>         604800  ; Expire
>         86400 ) ; Minimum TTL
> ;
> ;       Name Servers
> ;
> psk.net.        IN      NS      ns0.psk.net.
> psk.net.        IN      NS      ns1.psk.net.
> 
> ;
> ;       MX Records
> ;
> psk.net.        IN      MX      10      mail
> 
> ;
> ;       Just to assign an IP address to the domain by default.
> ;
> psk.net.        IN      CNAME   carrie
> 
> ;
> ;       A Records
> ;
> localhost       IN      A       127.0.0.1
> carrie          IN      A       206.153.116.7
> ns0             IN      A       206.153.116.8
> mail            IN      A       206.153.116.9
> www             IN      A       206.153.116.10
> ftp             IN      A       206.153.116.11
> mailclient      IN      A       206.153.116.12
> seduction       IN      A       206.153.116.25
> alison          IN      A       206.153.116.35
> accessdenied    IN      A       206.153.116.14
> demo            IN      A       206.153.116.16
> retribution     IN      A       206.153.116.21
> 
> ;
> ;       Canonicals
> ;
> loghost         IN      CNAME   carrie
> ns1             IN      CNAME retribution
> 
> 
> 
> ###############################
> on the secondary machine, named.conf reads as follows:
> ###############################
> 
> 
> /*
>  * A simple BIND 8 configuration
>  */
> 
> options {
>         directory "/var/named";
> };
> 
> zone "psk.net" in {
>         type slave;
>         file "db.psk.net";
>         masters { 206.153.116.8 ; };
> };
> 
> zone "116.153.206.in-addr.arpa" in {
>         type slave;
>         file "db.206.153.116";
>         masters { 206.153.116.8 ; };
> };
> 
> zone "0.0.127.in-addr.arpa" in {
>         type master;
>         file "db.127.0.0";
> };
> 
> zone "." in {
>         type hint;
>         file "db.cache";
> };
> 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org