Unable to slave root zones

[Sam Wilson]

On 2017-04-07 15:26:57 +0000, Matus UHLAR - fantomas said:

> On 07.04.17 07:36, Mark Knight wrote:
>> I've just noticed (after the slave zones expired), that the root name 
>> servers have been refusing my zone transfer requests since the end of 
>> March.
>> 
>> My confirm is per the standard named.conf example, e.g.:
>> 
>> zone "." {
>> type slave;
>> file "/usr/local/etc/namedb/slave/root.slave";
>> masters {
>> 192.5.5.241;    // F.ROOT-SERVERS.NET.
>> };
>> allow-query { localnets; };
>> notify no;
>> };
> 
> 1. are you sure you need slaving the root? most of clients doesn't...
> 
> 2. there are ~13 servers for root zone. did you check on more of them?

$ for ns in a b c d e f g h i j k l m ; do echo $ns: ; dig . axfr 
@$ns.root-servers.net | wc ; done
a:
       4      15      96
b:
   22529  169284 2231035
c:
   22529  169284 2231028
d:
       4      15      96
e:
       4      15      96
f:
       4      15      96
g:
   22529  169284 2231030
h:
       4      15      96
i:
       4      15      96
j:
       4      15      96
k:
   22529  169284 2231030
l:
       4      15      96
m:
       4      15      96

IPv4 only; 4 lines is a REFUSED.

Sam

-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.