> The windows server has to be configured to allow the zone transfer
> request to come from the linux server address.
I thought it should be windows servers has to allow zone transfer "to" the linux server address.
As my purpose is to let Windows DNS to transfer zone record to Linux BIND
> It will be auto-created in the directory mentioned near the top of the
> named.conf file, if named has write permission there (allowing for any
> chroot mentioned in /etc/sysconfig/named).
[root@watcher var]# more /etc/named.conf
options {
directory "/var/named/";
};
zone "abc.com" in {
type slave;
file "db.abc";
masters {172.16.1.42; };
allow-transfer { any; };
allow-query { any;};
notify yes;
};
I had added the directory option /var/named in /etc/named.conf. And I specified the "named" login
to have write permission to the whole /var/named folder and subfolder but the db.abc file is not
created at all. (I used /etc/init.d/named restart to trigger the zone transfer)
Below is my /var/log/messages log for zone transfer, my linux BIND server IP is 172.16.1.250 and
windows DNS server IP is 172.16.1.42. It prompts transfer of 'abc.com/IN' from 172.16.1.42#53:
failed while receiving responses: REFUSED. I don't know why as I put the allow zone transfer
property of my abc.com zone in Windows DNS server to "ANY". Why it still refused? Any idea?
Aug 12 11:52:35 watcher named[5889]: shutting down: flushing changes
Aug 12 11:52:35 watcher named[5889]: stopping command channel on 127.0.0.1#953
Aug 12 11:52:35 watcher named[5889]: no longer listening on 127.0.0.1#53
Aug 12 11:52:35 watcher named[5889]: no longer listening on 172.16.1.250#53
Aug 12 11:52:35 watcher named[5889]: exiting
Aug 12 11:52:35 watcher named: succeeded
Aug 12 11:52:37 watcher named[5996]: starting BIND 9.2.2-P3 -u named
Aug 12 11:52:37 watcher named[5996]: using 1 CPU
Aug 12 11:52:37 watcher named[5996]: loading configuration from '/etc/named.conf'
Aug 12 11:52:37 watcher named: named startup succeeded
Aug 12 11:52:37 watcher named[5996]: no IPv6 interfaces found
Aug 12 11:52:37 watcher named[5996]: listening on IPv4 interface lo, 127.0.0.1#53
Aug 12 11:52:37 watcher named[5996]: listening on IPv4 interface eth0, 172.16.1.250#53
Aug 12 11:52:37 watcher named[5996]: command channel listening on 127.0.0.1#953
Aug 12 11:52:37 watcher named[5996]: running
Aug 12 11:52:38 watcher named[5996]: transfer of 'abc.com/IN' from 172.16.1.42#53: failed while
receiving responses: REFUSED
Aug 12 11:52:38 watcher named[5996]: transfer of 'abc.com/IN' from 172.16.1.42#53: end of transfer
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
