Consistent error message in named.log

Worsham, Michael michael.worsham at
Mon Jul 2 12:51:27 UTC 2007

Is there a way to see from the primary master named server side to see
what the client is trying to update? The /var/adm/syslog/named.log
output just shows some basic NXDOMAIN information failing, so we just
want to see what subdomain or domain name it is trying to update.

We have somewhere in the range of 75 virtual firewalls so looking at
each one is really not an option.

-- Michael

-----Original Message-----
From: Mark_Andrews at [mailto:Mark_Andrews at] 
Sent: Thursday, June 28, 2007 11:00 PM
To: Worsham, Michael
Cc: bind-users at
Subject: Re: Consistent error message in named.log 

> Platform: HP-UX 11.00
> BIND Version: 9.2.0 for HP-UX 11.0
> We are encountering this message in our named.log file:

	This is a FAQ.

Q: I keep getting log messages like the following. Why?

   Dec 4 23:47:59 client updating zone '':
   failed: 'RRset exists (value dependent)' prerequisite not satisfied
A: DNS updates allow the update request to test to see if certain
conditions are
   met prior to proceeding with the update. The message above is saying
   conditions were not met and the update is not proceeding. See
   rfc2136.txt for more details on prerequisites.

Also prerequisites are processed before any acls according to RFC 2136
is why you see these even when updates are denied for everyone.


Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at

More information about the bind-users mailing list