Hello,
named-checkzone is warning you that the MX has a different FQDN than the zone
it is in.
This is fine so long as the "out of zone" MX record is valid, but
named-checkzone wants you to know that it can't verify for sure.
So, it is a heads up message and why the ultimate response is "OK".
I could be missing something else, but it looks okay to me.
It might make sense to lower the TTL test, verify, then restore the TTL once
the change has been blessed.
The intent here being that with a sufficiently low TTL, one could make
adjustments without waiting 7200 each time.
Hope this helps.
________________________________
From: "Lear, Karen (Evolver)" <karen.l...@uspto.gov>
To: "bind-users@lists.isc.org" <bind-users@lists.isc.org>
Sent: Tue, March 30, 2010 4:57:58 PM
Subject: Using an MX record from a different domain
I'm adding a new domain to my existing authoritative name
servers, and need to add an MX record for a device residing on existing
domain. When I run named-checkzone, I get a message about the MX record
being out of zone and not having an A record. However, at the end of my
named-checkzone output, I get "OK." Can I restart named as is
without causing problems or do I need to address these messages?
[kl...@dns1 conf]$ sudo named-checkzone -t /dns/chroot/conf
-D usptoenews.gov db.usptoenews
zone usptoenews.gov/IN: usptoenews.gov/MX
'smtpedge1.uspto.gov' (out of zone) has no addresses records (A or AAAA)
zone usptoenews.gov/IN: usptoenews.gov/MX
'smtpedge2.uspto.gov' (out of zone) has no addresses records (A or AAAA)
zone usptoenews.gov/IN: loaded serial 2010033000
usptoenews.gov.
7200 IN SOA dns1.uspto.gov. nmb.uspto.gov.
2010033000 10800 3600 604800 86400
usptoenews.gov.
7200 IN NS dns1.uspto.gov.
usptoenews.gov.
7200 IN NS dns2.uspto.gov.
usptoenews.gov.
7200 IN MX 5 smtpedge1.uspto.gov.
usptoenews.gov.
7200 IN MX 5 smtpedge2.uspto.gov.
dns1.usptoenews.gov.
7200 IN A 151.207.240.50
dns2.usptoenews.gov.
7200 IN A 151.207.246.51
enews.usptoenews.gov.
7200 IN A 151.207.244.68
localhost.usptoenews.gov.
7200 IN A 127.0.0.1
OK
Karen Lear
Evolver EUS - Network Operations
Phone: 571-272-5314
email: karen.l...@uspto.gov
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
