Single nameserver doesn't show signed SOA-RRs

Zenon Panoussis oracle at provocation.net
Wed Jun 29 23:15:29 UTC 2011


On 06/29/2011 10:57 PM, Stefan Foerster wrote:

> ...it complains that ns3.wars-nicht.de doesn't have a
> signed SOA. 

It complains that the SOA of wars-nicht.de itself is not signed, or that
ns3.wars-nicht.de does not have a signed SOA for billigmail.org and
incertum.net?

> I already tried increasing the serial for those zones to retransfer them, 
> but the error seems to persist.

Check whether the zone transfer actually took place. Even if you increase
the serial and send notifies, there could be a misconfiguration somewhere
preventing the notifies from getting through or the tranfer from taking
place.

Looking at them now, all three seem to have the same serial, 2011062902
for both domains.

Z




More information about the bind-users mailing list