RE: Servers loading zones with lower serials

2009-03-27 Thread Todd Snyder
This was a slave server hitting a master.  Both were hitting the same
master in this case.

Cheers,

Todd. 

-Original Message-
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry Margolin
Sent: Wednesday, March 25, 2009 8:45 PM
To: comp-protocols-dns-b...@isc.org
Subject: Re: Servers loading zones with lower serials

In article , "Todd Snyder" 
wrote:

> Good day,
> 
> I saw some strange behaviour from BIND and am trying to understand it.
> 
> In one of the labs, someone mucked up a DNS change and made the serial

> lower than the previous version.
> 
> Some of the nameservers complained:
> 
> Mar 23 15:07:24 ns1001 named[5913]: zone 5.1.10.in-addr.arpa/IN: 
> serial number (2008030900) received from master 10.1.1.1#53 < ours 
> (2008062600)
> 
> But some others just went ahead and loaded the zone anyways.

Were they masters or slaves?  Serial number checking is only done by
slaves when checking whether they need to perform a zone transfer from
the master.

--
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

-
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this transmission 
by unintended recipients is not authorized and may be unlawful.
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Servers loading zones with lower serials

2009-03-25 Thread Barry Margolin
In article , "Todd Snyder"  
wrote:

> Good day,
> 
> I saw some strange behaviour from BIND and am trying to understand it.
> 
> In one of the labs, someone mucked up a DNS change and made the serial
> lower than the previous version.  
> 
> Some of the nameservers complained:
> 
> Mar 23 15:07:24 ns1001 named[5913]: zone 5.1.10.in-addr.arpa/IN: serial
> number (2008030900) received from master 10.1.1.1#53 < ours (2008062600)
> 
> But some others just went ahead and loaded the zone anyways.

Were they masters or slaves?  Serial number checking is only done by 
slaves when checking whether they need to perform a zone transfer from 
the master.

-- 
Barry Margolin, bar...@alum.mit.edu
Arlington, MA
*** PLEASE don't copy me on replies, I'll read them in the group ***
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users