They are a consequence of a slave not being able to perform a refresh from the
master for a while. This may be because the zone is removed from the master
(but someone overlooked removing it from the slave(s) as well), bad permissions
set on the master, a communications error, to name a few. If your EXPIRE is too
low, you don’t give yourself enough time to catch and correct those errors.
- Kevin
From: bind-users-boun...@lists.isc.org
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Lucio Crusca
Sent: Monday, July 13, 2015 2:15 PM
To: bind-users
Subject: Re: servfail only for a zone
Il 13/07/2015 19:51, Darcy Kevin (FCA) ha scritto:
Half an hour is ridiculous, to be honest. Unless you have 24x7x365
eyes-on-glass looking for zone transfer failures constantly and ready and able
to instantly pounce on any such problems and fix them within minutes.
You have been persuasive enough, I'm definitely going to raise the expire
value, but now the question is: are the SERVFAIL replies a consequence of the
low expire value?
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
