Re: first axfr challenges

[Jack Craig <jack.craig.aptos@xxxxxxxxx>]

whois linuxlighthouse.com | grep ^Name
Name Server: NS21.WORLDNIC.COM
Name Server: NS22.WORLDNIC.COM
[jackc@ws ~ $ whois linuxlighost -t axfr linuxlighthouse.com ns21.worldnic.com
Trying "linuxlighthouse.com"
Using domain server:
Name: ns21.worldnic.com
Address: 162.159.26.132#53
Aliases:

Host linuxlighthouse.com not found: 4(NOTIMP)

; Transfer failed.

[jackc@ws ~ $ host -t axfr linuxlighthouse.com ns22.worldnic.com
Trying "linuxlighthouse.com"
Using domain server:
Name: ns22.worldnic.com
Address: 162.159.27.77#53
Aliases:

Host linuxlighthouse.com not found: 4(NOTIMP)

; Transfer failed.

something i dont get, if my registrar provides glue references for primary & secondary domain dns servers,

what purpose is served by anything in my host's named.conf (et al) having any reference to my domain if it's not

accessible/useful?

i had thought that i should provide the primary server and my hosting service provided secondary, but

that leaves only the secondary os i have only 1 responding

Thx, jackc...

On Mon, May 17, 2021 at 5:31 PM Ed Greshko <ed.greshko@xxxxxxxxxxx> wrote:

On 18/05/2021 03:50, Jack Craig wrote:
> *i am getting a notauth on my axfr attempt. what i am not seeing is an  A ip# for the secondary dns server.*

Oh, FWIW, I have previously mentioned that since your system is quite "open" I configured a system here as a
slave to your domain.  My named.conf contains....

zone "greshko.com" {
          type master;
          file "greshko.com.zone";
          allow-update { none; };
          allow-transfer { 2001:470:66:cce::2; 192.168.0.0/16; 2001:b030:112f:0000::/56; };
         };

zone "linuxlighthouse.com" {
           type slave;
           file "light.zone";
           masters { 108.220.213.121; };
          };

So, transfers of greshko.com are limited to the listed IPs.  While linuxlighthouse.com is wide open.

So, try these to see the results.

host -t axfr linuxlighthouse.com 211.75.128.214
host -t axfr greshko.com 211.75.128.214


--
Remind me to ignore comments which aren't germane to the thread.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure