Reverse delegation - refused on my DNS

Michael Monnerie michael.monnerie at
Thu Aug 20 21:37:35 UTC 2009

I'm still searching for the error.
Also, sorry for the strangeness of the mail format, I used a webmail for the last mails. This time it's Outlook, don't know if it's really any better... at least not for correctly indenting old mail texts :-(

> 	Because you don't serve and you
> 	tried to access the cache. You should slave
> so you have the CNAMEs locally.
> 	This will also make the above dig directed at your server
> 	work as the answer will come from the zone rather than
> 	the cache.

I did that now, helps :-))
> 	Note: the lookups are working remotely because interative
> 	resolvers ask for rather
> 	that as generated by the above
> 	dig.

Ah, I get the point. I always tested from a remote side with
dig -x
but that didn't work as this is not an open resolver. Slaving the zone as you suggested enables even these lookups to work now. I think it's good, as it helps remote sites to debug DNS when hunting an error.

A plain
dig -x
also works, so, do I have an issue or is everything OK with my configuration?

Thanks for all your help, to all three of you!
mfg zmi

More information about the bind-users mailing list