Mis-ordered SOA
Ketil Froyn
isc_bind at ketil.froyn.name
Fri Feb 6 15:05:51 UTC 2004
On Fri, 6 Feb 2004, Mark Jones wrote:
> On 5 Feb 2004 01:08:22 -0800
> stephenwvickers at hotmail.com (Steve) wrote:
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: mis-ordered SOAs for
> > zone ham.steve.com
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: print_output:
> > unparseable answer (1), zone ham.steve.com
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: IXFR failed, switching
> > to AXFR
>
> I've never seen that error before, but I do see that the SOA record in
> the ham.steve.com zone is for "steve.com." not "ham.steve.com." Perhaps
> that's the problem.
>
> $ dig ham.steve.com soa
>
> ; <<>> DiG 8.3 <<>> ham.steve.com soa
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; ham.steve.com, type = SOA, class = IN
>
> ;; AUTHORITY SECTION:
> steve.com. 1H IN SOA slave1.dns.stargate.net. hostmaster.stargate.net. (
> 2003120201 ; serial
> 1H ; refresh
> 15M ; retry
> 1W ; expiry
> 1H ) ; minimum
>
>
> ;; Total query time: 117 msec
> ;; FROM: magnesium to SERVER: default -- 167.142.225.5
> ;; WHEN: Fri Feb 6 08:31:20 2004
> ;; MSG SIZE sent: 31 rcvd: 113
That's not a SOA answer you got, that's an NXDOMAIN, with the SOA record
in the authority section. I'm not surprised a zone transfer of
ham.steve.com fails if it doesn't exist.
Ketil Froyn
ketil at froyn.name
http://ketil.froyn.name/
More information about the bind-users
mailing list