<div dir="ltr">OK - It seems there is a lot of confusion on setup as I didnt give the entire config.<div><br></div><div>Here is my entire config</div><div><br></div><div><b>Master config</b></div><div><div>zone "block.now" {</div><div> type master;</div><div> file "/var/lib/bind/zones/block.now.db";</div><div> notify explicit;</div><div> also-notify {</div><div> 2.2.2.2 port 15455;</div><div> };</div><div> allow-transfer {</div><div> 2.2.2.2;</div><div> };</div></div><div><br></div><div><b><br></b></div><div><b><br></b></div><div><b>Slave Config</b></div><div><div>zone "block.now" {</div><div> type slave;</div><div> file "/var/lib/bind/zones/block.now.db";</div><div> masters { 3.3.3.3; };</div><div> allow-transfer { none; };</div><div> allow-query { localhost;};</div><div> allow-notify { 3.3.3.3; };</div><div> };</div></div><div><br></div><div><br></div><div><br></div><div><b>/etc/bind/named.conf.options</b><br></div><div><div>options {</div><div> version "custombind";</div><div> allow-query { localhost;subnets; };</div><div> directory "/var/cache/bind";</div><div> recursion yes;</div><div> querylog yes;</div><div> forwarders {</div><div> 1.1.1.1;9.9.9.9;208.67.222.222;8.8.8.8;</div><div> };</div><div>// dnssec-validation auto;</div><div> request-ixfr yes;</div><div> auth-nxdomain no; # conform to RFC1035</div><div>// listen-on-v6 { any; };</div><div> listen-on port 53 { any; };</div><div> listen-on port 15455 {any;};</div><div> response-policy { zone "whitelist.allow" policy passthru;</div><div> zone "block.now"; };</div><div>};</div></div><div><br></div><div> @
<a class="eZoeIc" style="text-decoration:none;color:rgb(32,33,36);font-family:"Google Sans",Roboto,sans-serif;line-height:28px;overflow:hidden;white-space:nowrap;background-color:rgb(255,255,255)"><span class="gmail-Zxrb3d" style="line-height:22px">Matus UHLAR - fantomas - Yes that is the basic stuff. </span></a></div><div><a class="eZoeIc" style="color:rgb(32,33,36);font-family:"Google Sans",Roboto,sans-serif;line-height:28px;overflow:hidden;white-space:nowrap"><span class="gmail-Zxrb3d" style="line-height:22px">One clue I see here is whenever I do rndc reload there are no logs generated in xfer-out.log however on slave notify logs are seen. </span></a></div><div><a class="eZoeIc" style="color:rgb(32,33,36);font-family:"Google Sans",Roboto,sans-serif;line-height:28px;overflow:hidden;white-space:nowrap"><span class="gmail-Zxrb3d" style="line-height:22px">Even after zone refresh time it always </span></a><a class="eZoeIc" style="color:rgb(32,33,36);font-family:"Google Sans",Roboto,sans-serif;line-height:28px;overflow:hidden;white-space:nowrap"><span class="gmail-Zxrb3d" style="line-height:22px">shows 1 record transferred in fact some time I even add added or deleted more than 1 records. Hence finally I deleted the file from slave</span></a></div><div><a class="eZoeIc" style="color:rgb(32,33,36);font-family:"Google Sans",Roboto,sans-serif;line-height:28px;overflow:hidden;white-space:nowrap"><span class="gmail-Zxrb3d" style="line-height:22px">and restarted the daemon and it done the trick.</span></a></div></div><br><div class="gmail_quote"><div dir="ltr">On Sat, Jul 7, 2018 at 9:30 PM Matus UHLAR - fantomas <<a href="mailto:uhlar@fantomas.sk">uhlar@fantomas.sk</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 07.07.18 11:31, Blason R wrote:<br>
>Well after numerous try I could not succeed hence then I had to delete the<br>
>block.now.db file and had to restart the service<br>
>it then done the AXFR and later IXFR started as well.<br>
<br>
have you incremented the serial number on master?<br>
<br>
if the serial on the slave is bigger or the same as the one on the master<br>
(or the one in the NOTIFY), slave does not try to xfer the zone.<br>
<br>
-- <br>
Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" rel="noreferrer" target="_blank">http://www.fantomas.sk/</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
WinError #99999: Out of error messages.<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>