BIND 9.1.1rc4 cannot load reverse zones from WindowsNT's DNSand vice versa

[Danny Mayer]

         If you are running Microsoft's DNS on NT 4.0, they don't support it and in
   any case you need to ask them these questions.  It you are running Microsoft's
   DNS on Win2K then you still need to ask them.

         You didn't show the config file for this zone, however, the master is refusing
   the request to transfer the zone.  You probably didn't set it up to allow zone
   transfers to the slaves.  Make it the same as the forward zones and it should
   work.

                 Danny
At 02:07 AM 3/13/01, Systems wrote:

>Okay. Here are them (modified to hide sensitive info but, which is
>irrelevant
>within the current context):
>
>Mar 13 14:17:16 server_B /bin/named[10283]: transfer of
>'4.3.2.1.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:17:55 server_B /bin/named[10283]: transfer of '123.in-addr.arpa'
>from
>1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:18:25 server_B /bin/named[10283]: transfer of '6.7.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:20:22 server_B /bin/named[10283]: transfer of '5.7.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:20:36 server_B /bin/named[10283]: transfer of '4.7.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:21:13 server_B /bin/named[10283]: transfer of '3.7.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:21:24 server_B /bin/named[10283]: transfer of '2.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:23:16 server_B /bin/named[10283]: transfer of '3.8.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:24:53 server_B /bin/named[10283]: transfer of
>'0.0.127.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>Mar 13 14:25:32 server_B /bin/named[10283]: transfer of '123.in-addr.arpa'
>from 1.2.3.4#53: receiving responses: REFUSED
>
>I have been observing alot of IPs and ports scanning on my network, that it
>is
>necessary to put on this veil of non-disclosure.
>
>-----Original Message-----
>From: tmaestas at dnsconsultants.com <tmaestas at dnsconsultants.com>
>To: Systems <systems at buzzcity.com>
>Cc: bind-users at isc.org <bind-users at isc.org>
>Date: Tuesday, March 13, 2001 1:51 PM
>Subject: Re: BIND 9.1.1rc4 cannot load reverse zones from WindowsNT's DNSand
>vice versa
>
>
> >
> > The reason your bind server can not load the zones should
> > be evident by the errors it is producing in the logs when
> > it attempts to do so.  Check them out, or post them
> > here if you don't know what they mean.
> >
> >-Tim
> >
> >
> >On Tue, 13 Mar 2001, Systems wrote:
> >
> >> After running BIND 9.1.1rc4 for about 4 straight days on two slaves, both
>slaves
> >> now cannot load all reverse zones (in-addr.arpa) from the master server
>running
> >> DNS for Windows NT.  Transfer of forward zones from Windows NT to BIND 9
> >> is still okay.
> >>
> >> Also, it doesn't seem possible to make DNS for Windows NT to load reverse
> >> zones from BIND 9.1.1rc4 (didn't try anything else). Is there any
>incompatibilities
> >> between them? Microsoft, in its white paper, has stated its compliance to
>all the
> >> necessary  RFCs. Really puzzling, since almost all DNS traffic has been
>redirected
> >> away from  Windows NT, and load on Windows NT server is really very
>light,
> >> obvious isn't it?
> >>
> >> Thanks in advance for advice.
> >>
> >>
>