Hello!
I have several domains hosted on my nameservers (BIND 8.x). Everything works fine, except that for one of those domains I have following records in my logfiles (both, on master and on slave):
On master: >>>>>>>>>>>>>
...
Feb 28 10:53:35 nsmaster named[76]: denied update from [s.la.ve.ip].2752 for "mydomain.net" IN
Feb 28 10:53:43 nsmaster named[76]: denied update from [s.la.ve.ip].2758 for "mydomain.net" IN
...
<<<<<<<<<<<<<
On slave: >>>>>>>>>>>>>
...
Feb 28 11:05:14 nsslave named[94]: denied update from [s.la.ve.ip].2759 for "mydomain.net" IN
...
<<<<<<<<<<<<<
Weird, that these messages are only for one domain and in the same time DNS database changes are transfered from master to slave.
Any ideas?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
More a question than an answer, but is [s.la.ve.ip] the name of your slave DNS server? Do you run DHCP on it? Apart from windows and MacOSs, this is the other service which could try to update dns entries. Basically who is s.la.ve.ip?
According to RFC2136 (section 4.4 4.6 and 6, from what I gathered glancing over the rfc), slaves are supposed to forward updates to their master. Hence the duplicate, I suppose.
Looking at bind 8 configuration doc, by default dynamic DNS updates are disabled on slave and masters. In bind9 there is an option allow-update-forwarding, but it is missing in bind 8. Do I get this right?
nsmaster : Master DNS server
nsslave [s.la.ve.ip] : Slave DNS server and DHCP server
*.mydomain.net : some distant network.
Then the question is what is the link between the DHCP server on nsslave and *.mydomain.net. And are there any lines 'ddns-<somthing>' lines in your dhcpd.conf? Note that dhcpd.conf man page gives a recipe to increase the logging of Bind. Might be useful to get more info:
insert in /etc/named.conf:
logging {
channel update_debug {
file "/var/log/update_debug";
severity dynamic;
print-severity yes;
print-time yes; };
category update { update_debug; };
};
and "touch /var/log/update_debug" to create the file.
shifted:
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
Business Accounts
Answer for Membership
by: svsPosted on 2003-03-01 at 15:24:29ID: 8049491
looks like some windows xp systems are trying register themselves on your dns servers. this is default behaviour for them and it can be disabled.