Allow-transfer using BIND9

deepdown deepdown at packetstorm.nu
Mon Dec 2 23:33:30 UTC 2002


> I have three name servers (one master, two slaves) that are 
> running BIND 9.2.1 (on SuSE Linux 8.0).  They are operating 
> just as they should, but recently I added four new zones.  
> For some odd reason, the master is resolving them, but 
> refusing to allow the slaves to transfer from it.
> 
> Here's a sample of the entry I have for these zones:
> 
> zone "whatever.com" IN {
>         type master;
>         file "/dns/master/miscellaneous/whatever/db.com.whatever";
>         allow-transfer { x.x.x.x; y.y.y.y; };
> };      
> 
> 
> The oddity is that this is EXACTLY the same format that the 
> original zones are in.  There are no unusual entries in the 
> master's log files (except that it does record that it denied 
> zone transfers from x.x.x.x and y.y.y.y for the zone).  The 
> slave server logs simply show that they attempted to transfer 
> the new zones, but were denied.
> 
> Any thoughts?  Is this a bug?
> 
>  - Jon Fullmer

You need to create the zone whatever.com manually on the slave servers
(named.conf).
Then rndc reload on the slaves, and they will retrieve the zone record
for whatever.com.

Regards,

Niek




More information about the bind-users mailing list