DNS Error

[Paul Hawkins]

Feb 5 14:30:07 vectra named-xfer[8356]: [[xxx.16.10.56].49604] record too short from [xxx.16.12.1], zone uk01.xxx.org

Im getting this error every few seconds logged to syslog. Ive changed the ip address for security purposes in this posting.

Does anyone know what could be causing this?

The DNS is a slave for this zone.

Regards
Paul

[Shannon Petry]

Sounds like a bad entry in named.conf, or perhaps in your zone files.

First, dump the cache and look for the entry. If the cache does not match the zone file, dump the cache and reload the zone file.

Next, if the record is correct, check the named.conf file and make sure that your definitions either use numbers or fully qualified names. I usually use numbers when defining authorized slave servers, forwards, etc...

You can use h2n to make manual zone files, and compare this to your current zone files. I'm not sure that a real complete version of h2n is shipped with HP-UX as a standard, so you may have to download it from the main bind download site.

Regards,
Shannon

[Vincent Fleming]

So, you're the slave of the domain, and you're getting errors during zone transfers from the master...

Have they changed something on the master recently? (look back to when the errors started, and quiz the admin of the Master about what he did at around that time)

You could also be getting data errors on the 'net, but I think that's fairly unlikely.

My guess is that the master has a corrupt database or something, and for some unknown reason, it's not crashing completely, or is being restarted automatically.

Good luck!

Vince

[Wilfred Chau_1]

Either you are not allowed to do a zone transfer or uk01.xxx.org is an alias of another existing zone.

# dig xxx.org ns
# nslookup -type=ns xxx.org

Does either of the above commands give you only uk01.xxx.org?

[W.C. Epperson]

This is typically due to a denied zone transfer by the master. The master needs to permit the transfer in /etc/named.conf.

acl ztransfer { xxx.16.10.56; };
allow-transfer { ztransfer; };

[Paddy_1]

Yes!What the others said is correct.I would reconfigure bind for this.