<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Doing packet captures showed where the zone transfer was failing. Appears a record with the format of a0000-aa-aaa-aa1-a0-0.domain.com was the culprit. Odd as only 1 DNS server of many had the issue.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:"Calibri",sans-serif;color:black">From:
</span></b><span style="font-family:"Calibri",sans-serif;color:black">bind-users <bind-users-bounces@lists.isc.org> on behalf of Ben Scott <bscott@isc.org><br>
<b>Organization: </b>Internet Systems Corporation<br>
<b>Date: </b>Thursday, July 9, 2026 at 1:38 PM<br>
<b>To: </b>"bind-users@lists.isc.org" <bind-users@lists.isc.org><br>
<b>Subject: </b>Re: send: socket is not connected<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">CAUTION: This email originated from outside of Los Rios. Do not click links or open attachments unless you recognize the sender and know the content is safe. To mark the message as SPAM, right click the message, select “Junk” , and then
select “Block Sender”.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[Clerical note: This message is an on-list reply to an off-list reply.<o:p></o:p></p>
<p class="MsoNormal">My error resulted in the conversation accidentally being moved off-list.<o:p></o:p></p>
<p class="MsoNormal"> Which Mike's permission, I am returning the conversation to the list,<o:p></o:p></p>
<p class="MsoNormal">so others can contribute and/or benefit.]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 7/9/26 14:51, Mike Muzinich wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #B5C4DF 4.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-right:0in" id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE">
<p class="MsoNormal">All DNS servers are running Red Hat Enterprise Linux release 8.10 with<o:p></o:p></p>
<p class="MsoNormal">RedHat’s bind-9.11.36-16.el8_10.8.x86_64 package.<o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> This complicates things. ISC BIND 9.11.16 was released in 2021, and<o:p></o:p></p>
<p class="MsoNormal">BIND 9.11.0 was released in 2016. The overall branch is around ten<o:p></o:p></p>
<p class="MsoNormal">years old at this point. A huge number of improvements and bug fixes<o:p></o:p></p>
<p class="MsoNormal">have landed in ISC BIND since then.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Further, Red Hat has been making their own changes to the software<o:p></o:p></p>
<p class="MsoNormal">since them. Some of that is backporting fixes from newer BIND releases.<o:p></o:p></p>
<p class="MsoNormal"> Some of it is implementing their own fixes, independently. And I<o:p></o:p></p>
<p class="MsoNormal">expect they have also been tuning things to work as well as possible<o:p></o:p></p>
<p class="MsoNormal">with RHEL. One of the great things about open source is that vendors<o:p></o:p></p>
<p class="MsoNormal">can do things like that -- modify software to better fit their<o:p></o:p></p>
<p class="MsoNormal">customers' needs. But it does mean that we here at ISC are no longer in<o:p></o:p></p>
<p class="MsoNormal">the best position to help. If you need help with Red Hat's software,<o:p></o:p></p>
<p class="MsoNormal">your best bet is to contact Red Hat.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Our typical recommendation, for people who want to venture outside of<o:p></o:p></p>
<p class="MsoNormal">the Red Hat ecosystem, is to install a current version of vanilla ISC<o:p></o:p></p>
<p class="MsoNormal">BIND. This gets you the latest BIND features and fixes, while still<o:p></o:p></p>
<p class="MsoNormal">preserving your investment in the Red Hat platform. You can find<o:p></o:p></p>
<p class="MsoNormal">packages built for RHEL 8 here:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcopr.fedorainfracloud.org%2fcoprs%2fisc%2fbind%2f&c=E,1,mPw28iFjMUMNvaXERhW9DpmnwVvsnm4Pk-sIhcf8O7TVi9xFmNzSglqU816XP2FvSNNGkumNrCpNNLMbmMKt5mf4D3lVqaQ7eJhEiPpe92P2_d5vTZ6AzgY,&typo=1">https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fcopr.fedorainfracloud.org%2fcoprs%2fisc%2fbind%2f&c=E,1,mPw28iFjMUMNvaXERhW9DpmnwVvsnm4Pk-sIhcf8O7TVi9xFmNzSglqU816XP2FvSNNGkumNrCpNNLMbmMKt5mf4D3lVqaQ7eJhEiPpe92P2_d5vTZ6AzgY,&typo=1</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 7/9/26 14:51, Mike Muzinich wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #B5C4DF 4.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-right:0in" id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE">
<p class="MsoNormal">I am going to install and configure BIND on another server on the same<o:p></o:p></p>
</blockquote>
<p class="MsoNormal">> subnet to see if I can duplicate this. Very odd.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> That will help narrow things down. If it works then, you know the<o:p></o:p></p>
<p class="MsoNormal">problem is likely between the local network and the far-end secondary<o:p></o:p></p>
<p class="MsoNormal">server. If it still fails, the problem is likely in the local switch<o:p></o:p></p>
<p class="MsoNormal">and/or the primary server itself.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> It is likely that examination of logs and/or packet captures will be<o:p></o:p></p>
<p class="MsoNormal">required to pin it down further, however.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Good luck, and please keep us posted on what you find.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> -- Ben<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">Any opinions expressed in this message are those of the author alone.<o:p></o:p></p>
<p class="MsoNormal">All information is provided without warranty of any kind.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">Visit <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,GQk9UqCFZ5mqP1ejWIURegU5jfQWOsggH1uQBtyYHOxUMlb_Q5Q6TQT8J8Hb5lbzAfa_n7TiBhaI1eRAS7sKRC0O45MCUUEPSI2j1S9c1PLgCZMsCGTtDGZ7PwWb&typo=1">
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,GQk9UqCFZ5mqP1ejWIURegU5jfQWOsggH1uQBtyYHOxUMlb_Q5Q6TQT8J8Hb5lbzAfa_n7TiBhaI1eRAS7sKRC0O45MCUUEPSI2j1S9c1PLgCZMsCGTtDGZ7PwWb&typo=1</a> to unsubscribe
from this list.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>