LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 12-20-2022, 07:39 AM   #1
CyberIT
Member
 
Registered: Jun 2017
Posts: 56

Rep: Reputation: Disabled
Question SERVFAIL - Transfer status and failed while receiving responses


Hello

I have an event taking place almost every day around 8:00am on DNS Secondary servers, but we don’t see these events for the rest of the day.

Code:
08:04:54.812 xfer-in: info: transfer of 'intlab.com/IN' from 10.13.13.10#53: Transfer status: SERVFAIL
08:04:54.812 xfer-in: error: transfer of 'intlab.com/IN' from 10.13.13.10#53: failed while receiving responses: SERVFAIL

08:04:54.811 xfer-in: info: transfer of '10.in-addr.arpa/IN' from 10.13.13.10#53: Transfer status: SERVFAIL
08:04:54.811 xfer-in: error: transfer of '10.in-addr.arpa/IN' from 10.13.13.10#53: failed while receiving responses: SERVFAIL


Code:
options {
    listen-on port 53 { 127.0.0.1; <%= @ipaddress_eth0 -%>; };
#    listen-on-v6 port 53 { ::1; };
    allow-query { localhost; any; };

    directory   "/var/named";
    dump-file   "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";

    recursion yes;
    allow-recursion { localhost; any; };
    allow-transfer { none; };

    auth-nxdomain no;
    tcp-clients 300;
    filter-aaaa-on-v4 yes;

    transfers-in 30;

    edns-udp-size 4096;
    max-udp-size 4096;

    check-names slave ignore;
    check-names response ignore;

    dnssec-enable no;
    dnssec-validation no;
    dnssec-lookaside auto;


#    /* Path to ISC DLV key */
    bindkeys-file "/etc/named.iscdlv.key";

    managed-keys-directory "/var/named/dynamic";

    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
};


zone "." IN {
    type hint;
    file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";


zone "intlab.com" {
    type slave;
    file "/var/named/slaves/named.intlab.com";
    masters { 10.13.13.10; };
    allow-notify { none; };
    allow-query { any; };
    request-ixfr yes;
    masterfile-format text;
    forwarders {};
};

zone "10.in-addr.arpa" {
    type slave;
    file "/var/named/slaves/named.10.in-addr.arpa";
    masters { 10.13.13.10; };
    allow-notify { none; };
    allow-query { any; };
    request-ixfr yes;
    masterfile-format text;
};

I validate the servers and the zone transfers are up-to-date. Any help with this is much appreciated. Thanks!

Last edited by CyberIT; 12-20-2022 at 09:59 AM.
 
Old 12-23-2022, 12:00 PM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,174
Blog Entries: 1

Rep: Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040Reputation: 2040
Quote:
I have an event taking place almost every day around 8:00am on DNS Secondary servers, but we don’t see these events for the rest of the day.

08:04:54.812 xfer-in: info: transfer of 'intlab.com/IN' from 10.13.13.10#53: Transfer status: SERVFAIL
08:04:54.812 xfer-in: error: transfer of 'intlab.com/IN' from 10.13.13.10#53: failed while receiving responses: SERVFAIL

08:04:54.811 xfer-in: info: transfer of '10.in-addr.arpa/IN' from 10.13.13.10#53: Transfer status: SERVFAIL
08:04:54.811 xfer-in: error: transfer of '10.in-addr.arpa/IN' from 10.13.13.10#53: failed while receiving responses: SERVFAIL
Is there a cronjob running at 8:00am? Are you using cron at 8:00am in order to do AXFRs between master and slave? AXFRs should happen automatically as soon as a zonefile is modified.
You can also check the logs on both master and slave and see if you find anything.

Regards
 
Old 12-27-2022, 07:32 PM   #3
elgrandeperro
Member
 
Registered: Apr 2021
Posts: 415
Blog Entries: 2

Rep: Reputation: Disabled
SERVFAIL is strange. One reason is the zone is expired on the master server.

On the slave, what is the output of:

dig @10.13.13.10 -t axfr intlab.com

If the master is stealth, you need to declare it allow-notify. I think if it is listed as a NS server, then it implicitly defined.

compare the serial SOA of intlab.com on both master and slave. Are they the same? You can use dig to get the value, like:

dig @127.0.0.1 -t soa intlab.com (while logged into master or slave).

When you update intlab.com (and bump the serial number) does it appear right away?
 
  


Reply

Tags
dns failure, rhel7



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
failed while receiving responses: bad bitmap rjaszek Linux - Networking 0 10-02-2016 01:57 AM
Postfix failure: status=deferred (lost connection...while receiving the initial server greeting) labby Linux - Newbie 1 03-27-2016 12:54 PM
netstat -su does not show status while system is receiving packets Achyut khanna Red Hat 2 07-30-2012 01:20 PM
bind9 - dig -x returns - status: SERVFAIL eliufoo Linux - Server 4 05-19-2008 10:29 AM
failed while receiving responses: REFUSED on SLAVE with BIND 9.2.2 cccc Linux - Networking 9 10-07-2003 08:00 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:49 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration