Re: Zone transfers can be lost forever

2019-10-17 Thread Noel Butler
Edit the primary zone, just put a TXT record in it, saying anything, gibberish even, save and reload the zone let us know so we can check it for currency on both your NS1 and NS2 If you followed Tony's advice there is no reason it is not in sync and I don't see an issue. On 18/10/2019 05:48

Re: Zone transfers can be lost forever

2019-10-17 Thread jean-christophe manciot
> > If the zone file on the primary can be edited by `named` (dynamic > updates, signing, etc) then you need to `rndc freeze`, edit, `rndc thaw` > instead. I did all that, even restarted the systemd service on the primary after noticing the the issue. Then, on *both* servers: *named-checkzone -j

Re: Zone transfers can be lost forever

2019-10-17 Thread Tony Finch
jean-christophe manciot wrote: > However, if I increment the serial number (SN) on the primary from > 2019101614 to 2019101709 and order a retransfer on the secondary with "rndc > retransfer sdxlive.com", I get in the logs: > *on the primary*: > > (serial 2019101614) Did you `rndc reload sdxlive

Re: Zone transfers can be lost forever

2019-10-17 Thread jean-christophe manciot
Also, if I send the command "rndc notify sdxlive.com" on the primary, I get in the logs: *on the primary*: 17-Oct-2019 11:08:46.047 general: info: received control channel command 'notify sdxlive.com' 17-Oct-2019 11:08:46.053 notify: info: zone sdxlive.com/IN (signed): sending notifies (serial 201

Re: Zone transfers can be lost forever

2019-10-17 Thread jean-christophe manciot
However, if I increment the serial number (SN) on the primary from 2019101614 to 2019101709 and order a retransfer on the secondary with "rndc retransfer sdxlive.com", I get in the logs: *on the primary*: *17-Oct-2019 10:56:09.038 xfer-out: info: client @0x a.b.c.d#49155 (sdxlive.com <

Re: Zone transfers can be lost forever

2019-10-17 Thread jean-christophe manciot
> > wow something has chewed up your message and vomited it out again but some > of the remnants are vaguely legible... > I don't know what happened, but some IP addresses & other fields have been intentionally obfuscated. The original first message have been attached to this answer. I'm not sure

Re: Zone transfers can be lost forever

2019-10-16 Thread Tony Finch
jean-christophe manciot wrote: wow something has chewed up your message and vomited it out again but some of the remnants are vaguely legible... > - the debug log shows that the zone transfer has *successfully* taken place > on the primary towards the secondary server: > > - actually, the zone t

Zone transfers can be lost forever

2019-10-16 Thread jean-christophe manciot
Hi there, Here's the *context*: *Ubuntu 19.10 / Debian bullseye 11* *bind9 9.15.4* *zone "sdxlive.com " { type master; file "/etc/bind/db.sdxlive.com "; // Publishing and activating dnssec keys auto-dnssec maintain;