☰

BIND 不再响应 AXFR 请求

tag-icon • tag-icon domain-name-system bind master-slave dns-zone
BIND 不再响应 AXFR 请求

最近，我们移动了我们的主要外部 DNS 服务器。它前面有三个由我们的 ISP 提供的缓存 DNS 从属服务器。他们告诉我们，他们在进行区域传输 (AXFR) 时开始收到拒绝访问的请求。如果我将自己的 IP 添加到允许传输列表中，在使用带有 AXFR 参数的 dig 时，我也会出现传输失败的情况。我的绑定配置如下所示：

options {
    directory "/var/lib/named";
    dump-file "/var/log/named_dump.db";
    zone-statistics yes;
    statistics-file "/var/log/named.stats";
    listen-on-v6 { any; };
    notify-source 10.19.0.68 port 53;

    querylog yes;
    notify yes;
    allow-transfer { 
        127.0.0.1;  //localhost
        1.1.1.1;    //public dns slave 1
        2.2.2.2;    //public dns slave 2
        3.3.3.3;    //public dns slave 3
    };
    also-notify {
            1.1.1.1;  //public dns slave 1
            2.2.2.2;  //public dns slave 2
            3.3.3.3;  //public dns slave 3
    };
    include "/etc/named.d/forwarders.conf";
};
logging {
    channel simple_log {
        file "/var/log/bind.log" versions 10 size 3m;
        severity info;
        print-time yes;
        print-severity yes;
        print-category yes;
  };
    category default{ simple_log; };
    channel log_zone_transfers {
            file "/var/log/axfr.log" versions 10 size 3m;
            print-time yes;
            print-category yes;
            print-severity yes;
            };
    category xfer-out { log_zone_transfers; };
    channel log_notify {
            file "/var/log/notify.log" versions 10 size 3m;
            print-time yes;
            print-category yes;
            print-severity yes;
            };
    category notify { log_notify; };
    channel queries {
            file "/var/log/queries.log" versions 10 size 30m;
            print-time yes;
        severity info;
            print-category yes;
            print-severity yes;
            };
    category queries { queries; };
  };
zone "." in {
    type hint;
    file "root.hint";
};
zone "localhost" in {
    type master;
    file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" in {
    type master;
    file "127.0.0.zone";
};

include "/etc/named.conf.include";

zone "example.net " {
    type master;
    file "/var/lib/named/master/example.net.hosts";
    };
zone "example.com " {
    type master;
    file "/var/lib/named/master/example.com.hosts";
};

## -- other master files --

xfer 日志中的错误如下所示：

29-Oct-2012 14:20:02.806 xfer-out: info: client 1.1.1.1#59069: bad zone transfer request: 'example.com./IN': non-authoritative zone (NOTAUTH)

我尝试直接在区域文件上添加允许传输参数，但传输仍然失败。知道我做错了什么吗？

答案1

zone "example.com " {

复制准确吗？那里不应该有空格。

相关内容