debug SERVFAIL

[Per olof Ljungmark]

On 2016-10-02 16:50, Reindl Harald wrote:
> 
> 
> Am 02.10.2016 um 16:46 schrieb Per olof Ljungmark:
>> What is the best way to debug a SERVFAIL problem? I have tried to ramp
>> up the trace level a lot but that did not return anything useful.
>>
>> It is only one zone in question, namely the PTR for our external subnet.
>> What puzzles me the most is that a secondary on the same subnet answers
>> just fine for thesame query. All forwards zones resolves good as well.
>>
>> BIND version is 9.10.4-P3
> 
> most likely some error in the zonefile, look at named logs
> 
> that the secondary answers is normal because if the master refuses to
> load a zone it never reaches the slave and start to fail there only when
> it expires before the error is fixed
> 
> hence master/slave while in most environemnts you could technically
> generate the identical zone-files on all nameservers but then with the
> same errors and so all would fail (in case of PTR and mailservers with
> horrible results)

There is nothing useful in the logs, hence my question above. The zone
files are identical on master and slaves so I doubt there is a problem
with that.