Hello, I have internal and external views of mobinet.mn. And as I can see, serial became different when signed. Look below:
15-Sep-2020 11:56:03.624 general: info: zone mobinet.mn/IN/external (unsigned): loaded serial 2020080310 15-Sep-2020 11:56:03.627 general: info: zone mobinet.mn/IN/external (signed): loaded serial 2020080364 (DNSSEC signed) 15-Sep-2020 11:56:03.578 general: info: zone mobinet.mn/IN/internal (unsigned): loaded serial 2020080310 15-Sep-2020 11:56:03.587 general: info: zone mobinet.mn/IN/internal (signed): loaded serial 2020080310 (DNSSEC signed) It has anything to do with IPv6 records. I can't query PTR and some other records too Have a nice day :) BR, NYAMKHAND Buluukhuu Engineer TPD/ETSD UNESCO street - 28, MPM Complex Ulaanbaatar -14220, Mongolia Mobile: (976) 94081017 Web: www.mobicom.mn<http://www.newcom.mn/> Before you start - Be safety smart [cid:f5151531-223c-40df-9237-7de57bbe1e7b] ________________________________ From: Mark Andrews <ma...@isc.org> Sent: Tuesday, September 15, 2020 9:09 AM To: Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> Cc: bind-users@lists.isc.org <bind-users@lists.isc.org> Subject: Re: bind v6 record Look at the serial numbers in the answer below (2020080309) and the one I reported being available publicly ( 2020080363). Wherever you are getting the contents of mobinet.mn from it is out-of-date. You have the necessary tools and information to figure out where the problem is. Just work the problem logically. If you are in sync with your upstream, where is your upstream getting its copy of the zone from? > On 15 Sep 2020, at 10:47, Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> wrote: > > Hi, > > I've updated the zone and it looks like isn't the reason. > > > [root@mdns ~]# dig mobinet.mn @2407:6400:0:400::12 AAAA > > ; <<>> DiG 9.11.19 <<>> mobinet.mn @2407:6400:0:400::12 AAAA > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61375 > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ; COOKIE: d3f19a6790ccacf86751427c5f600e421fb3ca5191f8d954 (good) > ;; QUESTION SECTION: > ;mobinet.mn. IN AAAA > > ;; AUTHORITY SECTION: > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. administrator.mobinet.mn. 2020080309 > 10800 3600 1209600 38400 > > ;; Query time: 1 msec > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12) > ;; WHEN: Tue Sep 15 08:43:46 +08 2020 > ;; MSG SIZE rcvd: 122 > > > > > Have a nice day :) > BR, NYAMKHAND Buluukhuu > > Engineer > TPD/ETSD > UNESCO street - 28, MPM Complex > Ulaanbaatar -14220, Mongolia > Mobile: (976) 94081017 > Web: > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D207bc64e-7ee5c56d-207cff91-86aa398f0cb5-87bbde4da6478cc5%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttp%253A%252F%252Fwww.mobicom.mn%252F&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627&sdata=SgzoTmerqkeUewwlOw5gq6SNTRkWhRt2JU5QY2PuQ3o%3D&reserved=0 > > Before you start - Be safety smart > > <Outlook-srxscytr.png> > > From: Mark Andrews <ma...@isc.org> > Sent: Tuesday, September 15, 2020 8:37 AM > To: Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> > Cc: bind-users@lists.isc.org <bind-users@lists.isc.org> > Subject: Re: bind v6 record > > You have a out-of-date local copy of the zone. > > Look for ‘zone “mobinet.mn” {‘ in named.conf in 2407:6400:0:400::12. > > > Mark > > > On 15 Sep 2020, at 10:31, Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> wrote: > > > > > > Ah, I see, > > the cache on the resolver is out of date? > > I restarted the named but it's still the same. > > > > I restarted named on authoritative /mdns.mobinet.mn/ too. > > > > Have a nice day :) > > BR, NYAMKHAND Buluukhuu > > > > Engineer > > TPD/ETSD > > UNESCO street - 28, MPM Complex > > Ulaanbaatar -14220, Mongolia > > Mobile: (976) 94081017 > > Web: > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D3fbf8990-61218ab3-3fb8b04f-86aa398f0cb5-052f8c9100fb9fa9%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Dbd3b3a73-e3a3b728-bd3c03ac-86712524712d-5f828f2831ac9e2c%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttp%2525253A%2525252F%2525252Fwww.mobicom.mn%2525252F%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D%25252FSYpr%25252BK7kdpjwxI73ta6xZgPJBDynr%25252FiFmi%25252BLooMSc0%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146281627&sdata=m2HCihGut7%2FdZF28yqVhk0cNmcpodV3HmKMv0ueWH0E%3D&reserved=0 > > > > Before you start - Be safety smart > > > > <Outlook-avyx2ajz.png> > > > > From: Mark Andrews <ma...@isc.org> > > Sent: Monday, September 14, 2020 5:22 PM > > To: Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> > > Cc: bind-users@lists.isc.org <bind-users@lists.isc.org> > > Subject: Re: bind v6 record > > > > You have a out-of-date local copy of the zone. > > > > The zone’s contents publicly available have a serial of 2020080363. Your > > copy of the zone has a serial of 2020042290. > > > > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. > > administrator.mobinet.mn. 2020080363 10800 3600 1209600 38400 > > > > > > > On 14 Sep 2020, at 18:54, Nyamkhand Buluukhuu <nyamkh...@mobicom.mn> > > > wrote: > > > > > > Dears, > > > > > > What might be the reason of resolver couldn't get the AAAA record of the > > > domain? /Other records are fine/ > > > No answer but no error too. > > > > > > ================================= > > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11256 > > > ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 > > > ;; WARNING: recursion requested but not available > > > > > > ;; QUESTION SECTION: > > > ;mobinet.mn. IN AAAA > > > > > > ;; AUTHORITY SECTION: > > > mobinet.mn. 3600 IN SOA mdns.mobinet.mn. > > > administrator.mobinet.mn. 2020042290 10800 3600 1209600 38400 > > > > > > ;; Query time: 1 msec > > > ;; SERVER: 2407:6400:0:400::12#53(2407:6400:0:400::12) > > > ;; WHEN: Mon Sep 14 16:48:01 2020 > > > ;; MSG SIZE rcvd: 83 > > > =================================== > > > > > > I tried between master and slave authoritative servers, tried from the > > > allowed resolvers. SAME > > > > > > BUT, when I use online dig tools and run query from authoritative > > > servers, I get answers. > > > Also, when I use OpenDNS, I get answers normally. > > > > > > I'm stuck here, any advice is appreciated. > > > Thanks :) > > > > > > Have a nice day :) > > > BR, NYAMKHAND Buluukhuu > > > > > > Engineer > > > TPD/ETSD > > > UNESCO street - 28, MPM Complex > > > Ulaanbaatar -14220, Mongolia > > > Mobile: (976) 94081017 > > > Web: > > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dcbecd976-9572da55-cbebe0a9-86aa398f0cb5-651db099b8e695e3%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Dfac3a5d1-a45b288a-fac49c0e-86712524712d-1622e0230b269617%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D592547a1-07b27edb-59227e7e-86757b2df0b7-775def2156b0c797%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttp%25252525253A%25252525252F%25252525252Fwww.mobicom.mn%25252525252F%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DqCjjMAPGhEumDClHNZWZ0F9bMLdS4cq5WMyN%252525252FOZ3%252525252B2I%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D86mYXNYrcTAa0byobaKneQ%25252BVX824yaH%25252FihjueA8bDK8%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=4XbVPjaZJVF98c1UKSOGMsEXZ0GSPI1huwOKp%2FJOPns%3D&reserved=0 > > > > > > Before you start - Be safety smart > > > > > > <Outlook-wy1bstc5.png> > > > > > > _______________________________________________ > > > Please visit > > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Dfb22a0f4-a5bca3d7-fb25992b-86aa398f0cb5-005628c1ce59beb8%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253D2a93444f-740bc914-2a947d90-86712524712d-9f9bb43262cd91d2%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D9920fa7d-c7b7c307-9927c3a2-86757b2df0b7-fb3bf9a85504a4aa%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Flists.isc.org%25252525252Fmailman%25252525252Flistinfo%25252525252Fbind-users%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DMKgqqzAJKBvucf94V7spdWtKRQRu9sEIl3y3qigj7aU%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253D0IKf0Z0TXSAY%25252BVOn9P4PAj9SONP7zF8odwnw%25252Fk8ZnCQ%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=knaMGbyzP8ZIWk7YL%2BY2SrzgKb5iEcNmpq5g%2BXYFdlU%3D&reserved=0 > > > to unsubscribe from this list > > > > > > ISC funds the development of this software with paid support > > > subscriptions. Contact us > > > athttps://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3D35a7e834-6b39eb17-35a0d1eb-86aa398f0cb5-88d4cc7e4c07ac4a%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253Df7221464-a9ba993f-f7252dbb-86712524712d-031a2d756199f725%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253D87789dbb-d9efa4c1-877fa464-86757b2df0b7-508a53faca6a64d7%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Fwww.isc.org%25252525252Fcontact%25252525252F%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DT21cTWRpNqL8EOHuaRfMPaCnGU%252525252BlgfcGZS2kpy5UzWI%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253DBHX%25252B9hcTJAgjavpmKLaOKiJJGe5CeRSrU0oaE7HCzNA%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146291620&sdata=0JLeCdU05NyzQwOhqIRlw1H5iR1UMndG5cTmYV%2FFWB0%3D&reserved=0 > > > for more information. > > > > > > > > > bind-users mailing list > > > bind-users@lists.isc.org > > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect2.fireeye.com%2Fv1%2Furl%3Fk%3Db4d0368d-ea4e35ae-b4d70f52-86aa398f0cb5-9bb55df75dff83ac%26q%3D1%26e%3Dccc340b7-93dc-46d2-b88a-eaa2f70a7766%26u%3Dhttps%253A%252F%252Fapc01.safelinks.protection.outlook.com%252F%253Furl%253Dhttps%25253A%25252F%25252Fprotect2.fireeye.com%25252Fv1%25252Furl%25253Fk%25253D71f6555d-2f6ed806-71f16c82-86712524712d-603bd5e00801b8e1%252526q%25253D1%252526e%25253Dc30e2080-8aa3-451b-a73d-c0f0df178779%252526u%25253Dhttps%2525253A%2525252F%2525252Fapc01.safelinks.protection.outlook.com%2525252F%2525253Furl%2525253Dhttps%252525253A%252525252F%252525252Fprotect2.fireeye.com%252525252Fv1%252525252Furl%252525253Fk%252525253Df4955b61-aa02621b-f49262be-86757b2df0b7-1af1e1f4e8da1b96%2525252526q%252525253D1%2525252526e%252525253Deef8a575-636f-46cb-bbee-d64381996add%2525252526u%252525253Dhttps%25252525253A%25252525252F%25252525252Flists.isc.org%25252525252Fmailman%25252525252Flistinfo%25252525252Fbind-users%25252526amp%2525253Bdata%2525253D02%252525257C01%252525257Cnyamkhand%2525252540mobicom.mn%252525257C659742d03c6943d30e4008d8588fd199%252525257Cca63e6528b2e4e0e8b691fd46774bdeb%252525257C1%252525257C0%252525257C637356722028072013%25252526amp%2525253Bsdata%2525253DEmCGam028Oan8Ucm1Csc4XqiNptAvISUlewxFXM2rac%252525253D%25252526amp%2525253Breserved%2525253D0%2526amp%253Bdata%253D02%25257C01%25257Cnyamkhand%252540mobicom.mn%25257C5c59b511438140b09fec08d8590fdf2c%25257Cca63e6528b2e4e0e8b691fd46774bdeb%25257C1%25257C0%25257C637357272008808425%2526amp%253Bsdata%253Dtz9ZAObRzv4KyTBIg2QBKaWGxHRYN0tQWlXYLlAM3Rs%25253D%2526amp%253Breserved%253D0&data=02%7C01%7Cnyamkhand%40mobicom.mn%7Ca7f1650dbf784dc59b7408d859141819%7Cca63e6528b2e4e0e8b691fd46774bdeb%7C1%7C0%7C637357290146301618&sdata=nNOjtYyaSHNN1M7C9S3JGKO5rjSCoFXUhEyNHo9eDvI%3D&reserved=0 > > > > -- > > Mark Andrews, ISC > > 1 Seymour St., Dundas Valley, NSW 2117, Australia > > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
