configuring secondary zone on windows 2000 server

Mokwena Motseto MotsetM at sapo.co.za
Thu Jul 1 16:52:07 UTC 2004


Hi This what i get when i dig does it say anything

D:\Dig>dig sapo.co.za soa @sdsra.sapo.co.za

; <<>> DiG 9.2.2 <<>> sapo.co.za soa @sdsra.sapo.co.za
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 5

;; QUESTION SECTION:
;sapo.co.za.                    IN      SOA

;; ANSWER SECTION:
sapo.co.za.             2419200 IN      SOA     sdsra.sapo.co.za.
root.sdsra.sapo.co.za. 2004062901 10800 1800 5184000 2419200

;; AUTHORITY SECTION:
sapo.co.za.             2419200 IN      NS      nthodns1.sapo.co.za.
sapo.co.za.             2419200 IN      NS      nthodns2.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntnrdns3.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntwrdns4.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntfsdns5.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntkzdns6.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntecdns7.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntburgerps.sapo.co.za.
sapo.co.za.             2419200 IN      NS      techora4.sapo.co.za.
sapo.co.za.             2419200 IN      NS      open.sapo.co.za.
sapo.co.za.             2419200 IN      NS      sdsra.sapo.co.za.
sapo.co.za.             2419200 IN      NS      ntjhbcfgdc1.xps.cfgrp.co.za.
sapo.co.za.             2419200 IN      NS      ntjhbcfgdc2.xps.cfgrp.co.za.
sapo.co.za.             2419200 IN      NS      ntwcdns1.sapo.co.za.

;; ADDITIONAL SECTION:
nthodns1.sapo.co.za.    2419200 IN      A       165.8.11.31
nthodns2.sapo.co.za.    2419200 IN      A       10.5.50.103
ntnrdns3.sapo.co.za.    2419200 IN      A       165.11.88.140
ntwrdns4.sapo.co.za.    2419200 IN      A       10.96.2.24
ntfsdns5.sapo.co.za.    2419200 IN      A       165.9.129.47

;; Query time: 218 msec
;; SERVER: 165.8.9.51#53(sdsra.sapo.co.za)
;; WHEN: Thu Jul 01 18:49:12 2004
;; MSG SIZE  rcvd: 487

Mokwena Motseto

Isiah 29:12 "The book shall be given unto him, he who is not learnered
saying read this and pray thee" 



-----Original Message-----
From: Barry Margolin [mailto:barmar at alum.mit.edu]
Sent: 30 June 2004 18:43
To: comp-protocols-dns-bind at isc.org
Subject: Re: configuring secondary zone on windows 2000 server


In article <cbunj2$1cb5$1 at sf1.isc.org>,
 Mokwena Motseto <MotsetM at sapo.co.za> wrote:

> I thought that might be the cause, but i have setup a secondary zone on
the
> windows 200 server and when i try to transfer from master, it cannot
> transfer

Here are some possibilities:

1. You have an "xfrnets" directive in your named.boot, and the Windows 
server's address isn't in it, so zone transfers are prohibited.

2. There's an error in the zone file, which prevents the BIND server 
from being authoritative for the zone.  Does "dig sapo.co.za soa 
@<primary>" return an authoritative answer (i.e. is "aa" in the "flags:" 
section of the output)?  Check your system log for errors when BIND 
starts up.

3. There's a firewall blocking TCP connections from the Windows server 
to port 53 on the AIX server.

> -----Original Message-----
> From: Barry Margolin [mailto:barmar at alum.mit.edu]
> Sent: 29 June 2004 15:01
> To: comp-protocols-dns-bind at isc.org
> Subject: Re: configuring secondary zone on windows 2000 server
> 
> 
> In article <cbrmi9$g60$1 at sf1.isc.org>,
>  Mokwena Motseto <MotsetM at sapo.co.za> wrote:
> 
> > Hi
> > i am running BIND version 4.9 on AIX and i am trying to do configure it
to
> 
> Why are you still running BIND 4?  That's almost prehistoric these days.
> 
> > so that the servers that are not in the same domain host secondary
> records,
> > this is what i get when i do an nslookup, but i have to create a hosts
> file
> > for cfgrp.co.za domain first which confuses everything, is there a
simpler
> > way of doing thies
> 
> You shouldn't need to have your own zone file for cfgrp.co.za.  Servers 
> will look up those hosts the normal way if they need to.
> 
> If you're concerned because the addresses of these servers aren't shown 
> in the output below, don't be.  The reason for this is that you have so 
> many NS records for the domain that including all the addresses would 
> make the response too big for a 500-byte UDP packet.  So the Additional 
> Records section is cut off when it reaches that limit.
> 
> > 
> > C:\>nslookup -q=ns sapo.co.za
> > Server:  nthodns1.sapo.co.za
> > Address:  165.8.11.31
> > 
> > sapo.co.za      nameserver = ntjhbcfgdc1.xps.cfgrp.co.za
> > sapo.co.za      nameserver = ntjhbcfgdc2.xps.cfgrp.co.za
> > sapo.co.za      nameserver = ntwcdns1.sapo.co.za
> > sapo.co.za      nameserver = nthodns1.sapo.co.za
> > sapo.co.za      nameserver = nthodns2.sapo.co.za
> > sapo.co.za      nameserver = ntnrdns3.sapo.co.za
> > sapo.co.za      nameserver = ntwrdns4.sapo.co.za
> > sapo.co.za      nameserver = ntfsdns5.sapo.co.za
> > sapo.co.za      nameserver = ntkzdns6.sapo.co.za
> > sapo.co.za      nameserver = ntecdns7.sapo.co.za
> > sapo.co.za      nameserver = ntburgerps.sapo.co.za
> > sapo.co.za      nameserver = techora4.sapo.co.za
> > sapo.co.za      nameserver = open.sapo.co.za
> > sapo.co.za      nameserver = sdsra.sapo.co.za
> > ntwcdns1.sapo.co.za     internet address = 165.10.3.31
> > nthodns1.sapo.co.za     internet address = 165.8.11.31
> > nthodns2.sapo.co.za     internet address = 10.5.50.103
> > ntnrdns3.sapo.co.za     internet address = 165.11.88.140
> > ntwrdns4.sapo.co.za     internet address = 10.96.2.24
> > ntfsdns5.sapo.co.za     internet address = 165.9.129.47
> > ntkzdns6.sapo.co.za     internet address = 165.9.1.26
> > ntecdns7.sapo.co.za     internet address = 165.10.177.37
> > ntburgerps.sapo.co.za   internet address = 165.8.6.180
> > 
> > 
> > Mokwena Motseto
> > 
> > Isiah 29:12 "The book shall be given unto him, he who is not learnered
> > saying read this and pray thee" 
> > "This e-mail is sent in terms of the following policy/disclaimer. Click
on
> > this link http://www.sapo.co.za/mail_disclaimer.htm to read full
> > disclaimer."

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
"This e-mail is sent in terms of the following policy/disclaimer. Click on
this link http://www.sapo.co.za/mail_disclaimer.htm to read full
disclaimer."




More information about the bind-users mailing list