Mis-ordered SOA

Ketil Froyn isc_bind at ketil.froyn.name
Fri Feb 6 15:05:51 UTC 2004


On Fri, 6 Feb 2004, Mark Jones wrote:

> On 5 Feb 2004 01:08:22 -0800
> stephenwvickers at hotmail.com (Steve) wrote:
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: mis-ordered SOAs for
> > zone ham.steve.com
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: print_output:
> > unparseable answer (1), zone ham.steve.com
> > Jan 18 12:36:42 dns1.ham.steve.com named[362]: IXFR failed, switching
> > to AXFR
>
> I've never seen that error before, but I do see that the SOA record in
> the ham.steve.com zone is for "steve.com." not "ham.steve.com." Perhaps
> that's the problem.
>
> $ dig ham.steve.com soa
>
> ; <<>> DiG 8.3 <<>> ham.steve.com soa
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      ham.steve.com, type = SOA, class = IN
>
> ;; AUTHORITY SECTION:
> steve.com.              1H IN SOA       slave1.dns.stargate.net. hostmaster.stargate.net. (
>                                         2003120201      ; serial
>                                         1H              ; refresh
>                                         15M             ; retry
>                                         1W              ; expiry
>                                         1H )            ; minimum
>
>
> ;; Total query time: 117 msec
> ;; FROM: magnesium to SERVER: default -- 167.142.225.5
> ;; WHEN: Fri Feb  6 08:31:20 2004
> ;; MSG SIZE  sent: 31  rcvd: 113

That's not a SOA answer you got, that's an NXDOMAIN, with the SOA record
in the authority section. I'm not surprised a zone transfer of
ham.steve.com fails if it doesn't exist.

Ketil Froyn
ketil at froyn.name
http://ketil.froyn.name/


More information about the bind-users mailing list