TCPDUMP for a dig: (request was dig @192.168.213.12 SOA
int.servinfo.stba
16:33:52.289317 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
106: vlan 213, p 0, ethertype IPv4, 192.168.213.11.33053 >
192.168.213.12.53: 64585+ [1au] SOA? int.servinfo.stba. (58)
16:33:52.289317 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
106: vlan 213, p 0, ethertype IPv4, 192.168.213.11.33053 >
192.168.213.12.53: 64585+ [1au] SOA? int.servinfo.stba. (58)
16:33:52.289317 In f8:32:e4:8a:b7:b5 ethertype IPv4 (0x0800), length
102: 192.168.213.11.33053 > 192.168.213.12.53: 64585+ [1au] SOA?
int.servinfo.stba. (58)
16:33:52.289371 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
102: 172.17.0.1.1038 > 172.17.0.3.53: 64585+ [1au] SOA?
int.servinfo.stba. (58)
16:33:52.289376 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
102: 172.17.0.1.1038 > 172.17.0.3.53: 64585+ [1au] SOA?
int.servinfo.stba. (58)
16:33:52.291796 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
90: 172.17.0.3.53 > 172.17.0.1.1038: 64585 Refused- 0/0/1 (46)
16:33:52.291796 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
90: 172.17.0.3.53 > 192.168.213.11.33053: 64585 Refused- 0/0/1 (46)
16:33:52.291819 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
90: 192.168.213.12.53 > 192.168.213.11.33053: 64585 Refused- 0/0/1 (46)
16:33:52.291821 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
94: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.33053: 64585 Refused- 0/0/1 (46)
16:33:52.291824 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
94: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.33053: 64585 Refused- 0/0/1 (46)
The refused is not so surprising right now, as the slave can't reach the
master to get what it needs to serve...
TCPDUMP on notify:
16:41:39.112723 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 48109 notify [b2&3=0x2400] SOA? int.servinfo.stba.
(35)
16:41:39.112723 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 48109 notify [b2&3=0x2400] SOA? int.servinfo.stba.
(35)
16:41:39.112723 In f8:32:e4:8a:b7:b5 ethertype IPv4 (0x0800), length
79: 192.168.213.11.11940 > 192.168.213.12.53: 48109 notify [b2&3=0x2400]
SOA? int.servinfo.stba. (35)
16:41:39.112806 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.17296 > 172.17.0.3.53: 48109 notify [b2&3=0x2400] SOA?
int.servinfo.stba. (35)
16:41:39.112814 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.17296 > 172.17.0.3.53: 48109 notify [b2&3=0x2400] SOA?
int.servinfo.stba. (35)
16:41:39.113607 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 24291 notify [b2&3=0x2400] SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.113607 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 24291 notify [b2&3=0x2400] SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.113607 In f8:32:e4:8a:b7:b5 ethertype IPv4 (0x0800), length
86: 192.168.213.11.11940 > 192.168.213.12.53: 24291 notify [b2&3=0x2400]
SOA? 101.168.192.in-addr.arpa. (42)
16:41:39.113650 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.17296 > 172.17.0.3.53: 24291 notify [b2&3=0x2400] SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.113663 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.17296 > 172.17.0.3.53: 24291 notify [b2&3=0x2400] SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.114474 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 45118 notify [b2&3=0x2400] SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.114474 In f8:32:e4:8a:b7:b5 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.11.11940 >
192.168.213.12.53: 45118 notify [b2&3=0x2400] SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.114474 In f8:32:e4:8a:b7:b5 ethertype IPv4 (0x0800), length
86: 192.168.213.11.11940 > 192.168.213.12.53: 45118 notify [b2&3=0x2400]
SOA? 213.168.192.in-addr.arpa. (42)
16:41:39.114520 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.17296 > 172.17.0.3.53: 45118 notify [b2&3=0x2400] SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.114528 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.17296 > 172.17.0.3.53: 45118 notify [b2&3=0x2400] SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.115685 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.17296: 45118 notify*- 0/0/0 (42)
16:41:39.115685 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 192.168.213.11.11940: 45118 notify*- 0/0/0 (42)
16:41:39.115718 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
86: 192.168.213.12.53 > 192.168.213.11.11940: 45118 notify*- 0/0/0 (42)
16:41:39.115721 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 45118 notify*- 0/0/0 (42)
16:41:39.115726 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 45118 notify*- 0/0/0 (42)
16:41:39.115917 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 172.17.0.1.17296: 48109 notify*- 0/0/0 (35)
16:41:39.115917 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 192.168.213.11.11940: 48109 notify*- 0/0/0 (35)
16:41:39.115941 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
79: 192.168.213.12.53 > 192.168.213.11.11940: 48109 notify*- 0/0/0 (35)
16:41:39.115944 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 48109 notify*- 0/0/0 (35)
16:41:39.115948 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 48109 notify*- 0/0/0 (35)
16:41:39.116831 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.17296: 24291 notify*- 0/0/0 (42)
16:41:39.116831 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 192.168.213.11.11940: 24291 notify*- 0/0/0 (42)
16:41:39.116858 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
86: 192.168.213.12.53 > 192.168.213.11.11940: 24291 notify*- 0/0/0 (42)
16:41:39.116861 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 24291 notify*- 0/0/0 (42)
16:41:39.116864 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 24291 notify*- 0/0/0 (42)
16:41:39.162122 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.13182 > 172.17.0.1.53: 62225 SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.162122 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.13182 > 172.17.0.1.53: 62225 SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.162355 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.41240 > 172.17.0.3.53: 62225 SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.162368 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.41240 > 172.17.0.3.53: 62225 SOA?
213.168.192.in-addr.arpa. (42)
16:41:39.164389 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.41240: 62225 Refused- 0/0/0 (42)
16:41:39.164389 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.41240: 62225 Refused- 0/0/0 (42)
16:41:39.164493 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.53 > 172.17.0.3.13182: 62225 Refused- 0/0/0 (42)
16:41:39.164505 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.53 > 172.17.0.3.13182: 62225 Refused- 0/0/0 (42)
16:41:39.164799 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.17296: 45118 notify ServFail*- 0/0/0 (42)
16:41:39.164799 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 192.168.213.11.11940: 45118 notify ServFail*- 0/0/0
(42)
16:41:39.164827 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
86: 192.168.213.12.53 > 192.168.213.11.11940: 45118 notify ServFail*-
0/0/0 (42)
16:41:39.164830 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 45118 notify ServFail*- 0/0/0 (42)
16:41:39.164834 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 45118 notify ServFail*- 0/0/0 (42)
16:41:39.164923 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.16244 > 172.17.0.1.53: 10861 SOA? int.servinfo.stba. (35)
16:41:39.164923 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.16244 > 172.17.0.1.53: 10861 SOA? int.servinfo.stba. (35)
16:41:39.165143 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.60993 > 172.17.0.3.53: 10861 SOA? int.servinfo.stba. (35)
16:41:39.165164 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.60993 > 172.17.0.3.53: 10861 SOA? int.servinfo.stba. (35)
16:41:39.166571 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 172.17.0.1.60993: 10861 Refused- 0/0/0 (35)
16:41:39.166571 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 172.17.0.1.60993: 10861 Refused- 0/0/0 (35)
16:41:39.166654 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.53 > 172.17.0.3.16244: 10861 Refused- 0/0/0 (35)
16:41:39.166658 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
79: 172.17.0.1.53 > 172.17.0.3.16244: 10861 Refused- 0/0/0 (35)
16:41:39.166930 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 172.17.0.1.17296: 48109 notify ServFail*- 0/0/0 (35)
16:41:39.166930 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
79: 172.17.0.3.53 > 192.168.213.11.11940: 48109 notify ServFail*- 0/0/0
(35)
16:41:39.166964 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
79: 192.168.213.12.53 > 192.168.213.11.11940: 48109 notify ServFail*-
0/0/0 (35)
16:41:39.166967 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 48109 notify ServFail*- 0/0/0 (35)
16:41:39.166972 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
83: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 48109 notify ServFail*- 0/0/0 (35)
16:41:39.167053 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.13456 > 172.17.0.1.53: 48066 SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.167053 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.13456 > 172.17.0.1.53: 48066 SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.167197 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.47557 > 172.17.0.3.53: 48066 SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.167203 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.47557 > 172.17.0.3.53: 48066 SOA?
101.168.192.in-addr.arpa. (42)
16:41:39.167692 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.47557: 48066 Refused- 0/0/0 (42)
16:41:39.167692 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.47557: 48066 Refused- 0/0/0 (42)
16:41:39.167775 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.53 > 172.17.0.3.13456: 48066 Refused- 0/0/0 (42)
16:41:39.167781 Out 02:42:f9:95:2b:46 ethertype IPv4 (0x0800), length
86: 172.17.0.1.53 > 172.17.0.3.13456: 48066 Refused- 0/0/0 (42)
16:41:39.167970 P 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 172.17.0.1.17296: 24291 notify ServFail*- 0/0/0 (42)
16:41:39.167970 In 02:42:ac:11:00:03 ethertype IPv4 (0x0800), length
86: 172.17.0.3.53 > 192.168.213.11.11940: 24291 notify ServFail*- 0/0/0
(42)
16:41:39.168001 Out f8:32:e4:8a:b7:b7 ethertype IPv4 (0x0800), length
86: 192.168.213.12.53 > 192.168.213.11.11940: 24291 notify ServFail*-
0/0/0 (42)
16:41:39.168005 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 24291 notify ServFail*- 0/0/0 (42)
16:41:39.168010 Out f8:32:e4:8a:b7:b7 ethertype 802.1Q (0x8100), length
90: vlan 213, p 0, ethertype IPv4, 192.168.213.12.53 >
192.168.213.11.11940: 24291 notify ServFail*- 0/0/0 (42)
--------------------------------------------------------------------------------
Christian Tardif
christian.tar...@servinfo.ca
SVP, pensez à l’environnement avant d’imprimer ce message.
------ Message d'origine ------
De: "frank+pdns--- via Pdns-users" <pdns-users@mailman.powerdns.com>
À: "pdns-users-ml" <pdns-users@mailman.powerdns.com>
Envoyé : 2019-05-29 09:18:26
Objet : Re: [Pdns-users] Master/Slaves in docker containers
Hi Christian,
pdns master is running on host 192.168.213.11, and container ip is
172.17.0.4
pdns slave is running on host 192.168.213.12, and container ip is
172.17.0.3
both containers have gateway set to 172.17.0.1, and hosts have gateway
set to 192.168.213.1
Both containers publishes udp/53 and tcp/53 (as 0.0.0.0:53) so
basically, I can connect to any of these two, targetting the
192.168.213.x IP
But when I do a zone update on the master container, docker logs of
the pdns-slave shows these two things, for all the domains for which
he should be authoritative:
- Received NOTIFY for _this_particular_zone_ from 172.17.0.1 for which
we are not authoritative
- Error resolving SOA or NS for _this_particular_zone_ at: 172.17.0.1:
Query to '172.17.0.1' for SOA of '_this_particular_zone_' produced no
answer
Could you do the following:
- start a tcpdump on pdns-slave
- from pdns-master: do a dig something @192.168.213.12
- from pdns-master: trigger a notify to 192.168.213.12
And show us the tcpdump?
Frank
_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
https://mailman.powerdns.com/mailman/listinfo/pdns-users
