> > > > On 10.06.10 09:34, Matus UHLAR - fantomas wrote:
> > > > > Jun 9 23:11:58 mydb02 named[1427]: general: error: zone ./IN:
> > > > > ixfr-from-differences: failed: new serial (2010060900) out of range
> > > > > [2010060901 - 4157544547]
> >
> > > In message <20100625060415.ga18...@fantomas.sk>, Matus UHLAR - fantomas
> > > writes:
> > > > We get these quite often. Any idea where could be the problem?
> >
> > On 25.06.10 16:10, Mark Andrews wrote:
> > > Turn off try-tcp-refresh.
> In message <20100625072717.gc18...@fantomas.sk>, Matus UHLAR - fantomas
> writes:
> > Is there better documentation for the try-tcp-refresh option?
> > While I have no reason not to trust you, I would like to understand the
> > problem itself. Is looksa likt the tcp refresh would transfer the zone
> > independently on SOA serial arithmetics.
On 25.06.10 17:49, Mark Andrews wrote:
> With "try-tcp-refresh yes;" the udp retries fail to the master that
> is behind. Named does a axfr from that master and you get the message
> you see.
> The following may also help as it turns on SOA before AXFR for the
> ixfr-from-differences case. This has not been tested.
so named does the AXFR instead of checking SOA when UDP fails?
looks your patch is fixing this.
I have applied the patch (9.7.1) and let you know if it helps.
> --- lib/dns/zone.c 2 Jun 2010 01:00:28 -0000 1.540.2.26
> +++ lib/dns/zone.c 25 Jun 2010 07:47:41 -0000
> @@ -11946,7 +11950,10 @@
> } else if (DNS_ZONE_OPTION(zone, DNS_ZONEOPT_IXFRFROMDIFFS)) {
> dns_zone_log(zone, ISC_LOG_DEBUG(1), "ixfr-from-differences "
> "set, requesting AXFR from %s", master);
> - xfrtype = dns_rdatatype_axfr;
> + if (DNS_ZONE_FLAG(zone, DNS_ZONEFLG_SOABEFOREAXFR))
> + xfrtype = dns_rdatatype_soa;
> + else
> + xfrtype = dns_rdatatype_axfr;
> } else if (DNS_ZONE_FLAG(zone, DNS_ZONEFLG_FORCEXFER)) {
> dns_zone_log(zone, ISC_LOG_DEBUG(1),
> "forced reload, requesting AXFR of "
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
