problem zone transfer

Sam Trenholme strenholme.usenet at gmail.com
Thu Sep 24 18:01:50 EDT 2009


To address the original poster, it works for me.

Using MaraDNS 1.3.14 (zoneserver, actually), and the following mararc file:

ipv4_bind_addresses = "127.0.0.1"
tcp_convert_server = "127.0.0.1"
tcp_convert_acl = "0.0.0.0/0"
chroot_dir = "/etc/maradns"
csv2 = {}
csv2["example.com."] = "db.example.com"
zone_transfer_acl = "127.0.0.1"
recursive_acl = "127.0.0.1,192.168.110.0/24"
hide_disclaimer = "YES"
chroot_dir = "/etc/maradns"
random_seed_file="/dev/urandom"
maxprocs = 70
no_fingerprint = 1
default_rrany_set = 3
max_chain = 8
max_ar_chain = 1
max_total = 20
verbose_level = 3
debug_msg_level = 0
dns_port = 53
maximum_cache_elements = 1024
min_ttl_cname = 900
min_ttl = 300

And the following db.example.com file:

example.com.         +1   SOA     z.%
y@%     1      1  1   1 1
example.com.         +3600   NS      ns1.example.net.
example.com.         +3600   NS      ns2.example.net.
example.com.         +3600   NS      ns3.example.net.
example.com.         +3600   MX      10 mail.example.net.
example.com.         +3600   MX      20 mail2.example.net.
example.com.         TXT     'dns.'

example.com.         +3600   A       10.1.2.3
www.example.com.     +3600   A       10.1.2.4
xx.example.com.      +3600   A      10.1.2.6
#*.example.com.       +3600   A       10.1.2.5

I am able to use zoneserver to transfer a zone:

$ ./fetchzone example.com 127.0.0.1
example.com. +1 soa z.example.com. y at example.com. 1 1 1 1 1 ~
example.com. +3600 ns ns1.example.net. ~
example.com. +3600 ns ns2.example.net. ~
example.com. +3600 ns ns3.example.net. ~
example.com. +3600 mx 10 mail.example.net. ~
example.com. +3600 mx 20 mail2.example.net. ~
example.com. +86400 txt 'dns.' ~
example.com. +3600 a 10.1.2.3 ~
www.example.com. +3600 a 10.1.2.4 ~
xx.example.com. +3600 a 10.1.2.6 ~
# Second SOA received, exiting

So, the next questions are:

* Which DNS server are you trying to transfer to?

* Does this DNS server have an IP in zone_transfer_acl?

* Which version of MaraDNS are you running?

* Are you running both the 'maradns' and 'zoneserver' daemons?

> Is the zone transfer to a windows box (where windows is the client)?
> Because that doesn't work for me (using maradns stable - not sure about the
> development branch).

It could be a compatibility issue.  It could also be a configuration
issue (are you running 'zoneserver'?  Does this DNS server have an IP
in zone_transfer_acl?)

> I know that maradns uses an older format for it's zone transfers (from a
> previous draft) which may be part of the problem.

We don't know what the problem is until we get more information.

DNS really hasn't changed since 2001 when I first wrote MaraDNS; don't
think DNS is like HTML+CSS or Javascript.  Because it's not.  It's
pretty static and they haven't really changed how Zone transfers are
done since Regan was president of the US.

- Sam

Note: I do not answer MaraDNS support requests sent by private email
without being compensated for my time. I will discuss rates if you
want this kind of support. Thank you for your understanding.


More information about the list mailing list