Right, BIND 9.18 now enforces Section 2.2 of RFC 5936, specifically, this:
"The AXFR server MUST copy the
Question section from the corresponding AXFR query message into the
first response message's Question section. For subsequent messages,
it MAY do the same or leave the Question se
That gets me more information, and I think puts the problem onto
axfrdns. Thanks.
xfer-in: info: zone example.net/IN: Transfer started.
xfer-in: debug 1: zone example.net/IN: forced reload, requesting AXFR of
initial version from 198.51.100.1#53
xfer-in: info: transfer of 'example.net/IN' from
Set debug level 3 on the xfrin channel. There are some debug level messages
that really should be set to error level in lib/dns/xfrin.c on FORMERR.
Also make sure you are running dig from the same version as later versions are
more strict in parsing responses from the wire.
> On 1 Sep 2023, at
I have a system running BIND 9.18.17 that needs to transfer a zone from
djbdns/axfrdns. I receive FORMERRs, and haven't been able to get any log
messages indicating the problem.
xfer-in: info: zone example.net/IN: Transfer started.
xfer-in: info: transfer of 'example.net/IN' from 198.51.100.1#5
4 matches
Mail list logo