BIND 9.7 Serial Number Decrease Problem

McDonald, Dan Dan.McDonald at
Mon Jun 6 20:20:26 UTC 2011

> -----Original Message-----
> From: at
[ at]
> On Behalf Of Tony Finch
> Sent: Monday, June 06, 2011 2:43 PM
> To: Barry Finkel
> Cc: bind-users at
> Subject: Re: BIND 9.7 Serial Number Decrease Problem

I think your root problem is trying to deal with active directory
integrated zones.  We stopped using them entirely when we found that
each domain controller maintains an individual SOA record with its own
serial number.  The serial numbers rapidly (and purposely) fall out of
sync, but active directory doesn't care as they use a different
replication method.

The only way that we could successfully interact from bind was to set up
a forward-only zone and try to cache the results.  When we found that
Active directory under windows 2000 was unable to maintain proper
synchronization, we switched to bind for all zones and haven't looked

Daniel J McDonald, CCIE # 2495, CISSP # 78281
Austin Energy

More information about the bind-users mailing list