<p>Allow-transfer is not the same as forwarding. </p>
<p>Are they wanting to secondary from you? </p>
<p>If so you need to ensure they can do queries against your master for the zones so they can request soa to check the serial number. </p>
<p>Also it appears they are trying to xfer the cidr block with a different name than you are loading it as. <br>
You load 104.16.98.in-addr.arpa. they are transferring 104-22.16.98.in-addr.arpa. <br>
-Ben Croswell </p>
<div class="gmail_quote">On May 2, 2012 1:18 PM, "David" <<a href="mailto:dmilholen@wletc.com">dmilholen@wletc.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div text="#000000" bgcolor="#ffffff">
Hello All,<br>
I am new here but have been watching the list for a while.<br>
I run a small WISP and we have just moved to a new carrier.<br>
They have provided us with a cdir ipv4 block of /22 and a /23.<br>
I am trying to get my reverse DNS working correctly but they will
not point<br>
their servers to my authoritative servers to tell these blocks where
to find <br>
their reverse. They told me to place forwards in my servers which I
have done.<br>
<br>
FYI: I am running Bind 9 latest stable on my systems not sure what
the carrier is running.<br>
<br>
Here is what they show on their logs:<br>
<br>
<font face="Arial"><span style="text-indent:0px;letter-spacing:normal;text-align:left;font:11px Arial;text-transform:none;white-space:normal;background-color:rgb(241,246,230);display:inline!important;float:none;word-spacing:0px">01-May-2012
09:07:30.868 transfer of '104-22.16.98.in-addr.arpa/IN' from
98.16.104.14#53: connected using 207.91.5.70#40513</span><br style="text-indent:0px;letter-spacing:normal;text-align:left;font:11px Arial;text-transform:none;white-space:normal;background-color:rgb(241,246,230);word-spacing:0px">
<span style="text-indent:0px;letter-spacing:normal;text-align:left;font:11px Arial;text-transform:none;white-space:normal;background-color:rgb(241,246,230);display:inline!important;float:none;word-spacing:0px">01-May-2012 09:07:30.971 transfer of
'104-22.16.98.in-addr.arpa/IN' from 98.16.104.14#53: failed
while receiving responses: NOTAUTH</span><br style="text-indent:0px;letter-spacing:normal;text-align:left;font:11px Arial;text-transform:none;white-space:normal;background-color:rgb(241,246,230);word-spacing:0px">
<span style="text-indent:0px;letter-spacing:normal;text-align:left;font:11px Arial;text-transform:none;white-space:normal;background-color:rgb(241,246,230);display:inline!important;float:none;word-spacing:0px">01-May-2012 09:07:30.971 transfer of
'104-22.16.98.in-addr.arpa/IN' from 98.16.104.14#53: end of
transfer</span></font>
<div> <br>
Here is what My logs show:<br>
<br>
</div>
02-May-2012 15:28:29.979 security: client 162.40.117.250#6483: query
(cache) '104-22.16.98.in-addr.arpa/SOA/IN' denied<br>
02-May-2012 15:28:30.133 xfer-out: client 162.40.117.250#43378: bad
zone transfer request: '104-22.16.98.in-addr.arpa/IN':
non-authoritative zone (NOTAUTH)<br>
<br>
Here is what the named.conf zone looks like<br>
<br>
zone "104.16.98.in-addr.arpa" {<br>
type master;<br>
file "/var/named/98.16.104.rev";<br>
allow-transfer {<br>
166.102.165.15;<br>
162.39.164.14;<br>
207.91.5.70;<br>
162.40.117.250;<br>
};<br>
I placed the forwarders to allow transfer on this zone but I think
the zone name is no good.<br>
<br>
Thanks<br>
Dave<br>
<br>
</div>
<br>_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br></blockquote></div>