On 05/02/2017 11:27 AM, Kevin A. McGrail wrote:
Dave, thoughts re: Hyperreal below?
Hrm, I seem to be getting a block. My usual tool for this is djbdns, and
I pull down secondaries using tcpclient, as so:
[root@taz4 /etc/tinydns/root/secondaries]# /usr/local/bin/tcpclient
62.210.60.231 53 /usr/local/bin/axfr-get spamassassin.org
spamassassin.org foo.tmp
axfr-get: fatal: unable to parse AXFR results: protocol error
Any ideas? I'm coming either from 209.237.226.90 or .92, not sure which
would be default but I think .92.
Brian
Kevin, please pass this along to Brian:
Brian,
I had .92 in the PowerDNS allowed-axfr list so it must be coming from
.90. I have added .90 to the list so please try it again when you get a
chance.
P.S. You can easily check the outbound (initiated traffic) IP with
'curl curlmyip.net'.
Thanks,
Dave
On Tue, 2 May 2017, Kevin A. McGrail wrote:
Gents, I appreciate your patience and I'm cc'ing a new list for SA
sysadmins
so there can be better documentation with a higher bus factor. If you
are ok
with your emails being known, that would be cool if you replied back
to the
list.
Please point your public slaves at 62.210.60.231 as their master,
allowing
notifies/transfers/beers to flow freely.
Grant, can you confirm which IPs we should notify? We have some
discrepancies
but perhaps you had some slaving internally occurring however there were
small discrepancies on the records.
Brian, we'll check when you turn things back on but it appears you were
missing a test DKIM record oddly enough. Perhaps a record length
limit or
something.
Best,
KAM
