How can I set the interface used to transfer zones?

Carlos Ribas carlos at ansp.br
Thu Jul 5 14:34:11 UTC 2012


I tried  transfer-source before, but  this is what happened:

05-Jul-2012 11:04:53.550 general: info: zone example.com/IN/internal:
refresh: retry limit for master 143.X.X.X#53 exceeded (source 10.0.1.3#0)

Maybe I'm doing something wrong, but this only tells to slave to use its
private IP, but it still try to use the public IP from master. This is my
configuration:

Slave (10.0.1.3)
Options{
        auth-nxdomain no;    # conform to RFC1035
        version "Not Available";
        allow-notify { 10.0.1.24; }; # Master
        transfer-source 10.0.1.3;
        allow-transfer { none; };
        notify no;
        dnssec-enable yes;
        dnssec-validation yes;
}

view "internal" {
      match-clients { key internal; !allviewkeys; local; };
      server 10.0.1.24 { keys internal; };
      allow-query { local; };
      allow-query-cache { local; };
      recursion yes;

      Zones...
}


Master (10.0.1.24)
view "internal" {
      match-clients { key internal; !allviewkeys; local; };
      server 10.0.1.3 { keys internal; };
      allow-query { local; };
      allow-query-cache { local; };
      allow-transfer { 10.0.1.3; };
      allow-recursion { local; };
      zone-statistics yes;

      Zones...
}

Any help?

---------------------------------
Carlos Eduardo Ribas




2012/7/5 Jan-Piet Mens <jpmens.dns at gmail.com>

> >     Yes. That´s the problem. I have this statement defined, but it still
> > try to connect using the wrong IP. Any ideas?
>
> I misunderstood then. Try `transfer-source'.
>
>         -JP
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120705/df26cd78/attachment.html>


More information about the bind-users mailing list