27 Lis
2014
27 Lis
'14
10:33
Hi Eric,
could you perhaps launch a tcpdump on master and slave and look directly at the
communication?
(Or do a dump of the DNS traffic and send it offlist.)
Cheers,
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
From: "Eric Kom"
<erickom.dns(a)kom.za.net>
To: knot-dns-users(a)lists.nic.cz
Sent: Thursday, November 27, 2014 10:31:05 AM
Subject: Re: [knot-dns-users] failed (connection refused)
On 27/11/2014 10:53, Ondřej Surý wrote:
Hi Eric,
Hi Ondrej
you have allowed slave on 41.134.2.3, but your
logs say 41.134.194.89
The IP 41.134.194.89 (Public IP router) its the address from
my other
network that I used to connect to the 41.134.2.3 and 41.134.2.2
I'm also surprised to see it.
Perhaps your slave has multiple IP addresses and
you didn't specify what IP
address to use for XFR on the slave?
No,
In the remotes statement the IP for the master look like above:
masterOnKnot { address 41.134.2.2@53; }
In the zones statement the xfr-in address look like above:
xfr-in masterOnKnot;
Cheers,
--
Ondřej Surý -- Chief Science Officer
-------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Americka 23, 120 00 Praha 2, Czech Republic
mailto:ondrej.sury@nic.cz http://nic.cz/
-------------------------------------------
----- Original Message -----
--
--
Kind Regards
Eric Kom
Senior IT Manager - Metropolitan Schools
_________________________________________
/ You are scrupulously honest, frank, and \
| straightforward. Therefore you have few |
\ friends. /
-----------------------------------------
\
\
.--.
|o_o |
|:_/ |
// \ \
(| Kom | )
/'\_ _/`\
\___)=(___/
2 Hennie Van Till, White River, 1240
Tel: 013 750 2255 | Fax: 013 750 0105 | Cell: 078 879 1334
erickom(a)kom.za.net | erickom(a)metropolitancollege.co.za www.kom.za.net |
www.kom.za.org | www.erickom.co.za
Key fingerprint: 513E E91A C243 3020 8735 09BB 2DBC 5AD7 A9DA 1EF5
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users From: "Eric
Kom"<erickom.dns(a)kom.za.net>
To:knot-dns-users@lists.nic.cz
Sent: Thursday, November 27, 2014 9:37:14 AM
Subject: [knot-dns-users] failed (connection refused)
Good day All,
Please I got a connection refused when trying to setup a master and
slave on the same network.
THIS IS AN EXTRACT FROM MY MASTER KNOT.CONF
remotes {
masterOnKnot { address 41.134.2.2@53; }
slaveOnKnot { address 41.134.2.3@53; }
}
zones {
storage "/var/lib/knot";
metropolitanbuntu.co.za {
file "/var/lib/knot/db.metropolitanbuntu.co.za";
xfr-out slaveOnKnot;
notify-out slaveOnKnot;
}
}
root@ns1:~# knotc reload
OK
root@ns1:~# grep knot /var/log/syslog
Nov 27 07:10:41 ns1 knotd[469]: error: [metropolitanbuntu.co.za] IXFR,
outgoing, 41.134.194.89@50151: failed to start (not allowed)
Nov 27 07:10:41 ns1 knotd[469]: 2014-11-27T07:10:41 error:
[metropolitanbuntu.co.za] IXFR, outgoing, 41.134.194.89@50151: failed to
start (not allowed)
Nov 27 08:08:09 ns1 knotd[469]: error: [metropolitanbuntu.co.za] IXFR,
outgoing, 41.134.194.89@49111: failed to start (not allowed)
Nov 27 08:08:09 ns1 knotd[469]: 2014-11-27T08:08:09 error:
[metropolitanbuntu.co.za] IXFR, outgoing, 41.134.194.89@49111: failed to
start (not allowed)
Nov 27 09:27:33 ns1 knotd[469]: info: remote control, received command
'reload'
Nov 27 09:27:33 ns1 knotd[469]: info: reloading configuration
Nov 27 09:27:34 ns1 knotd[469]: info: configuration reloaded
Nov 27 09:27:34 ns1 knotd[469]: info: [metropolitanbuntu.co.za] loaded,
serial 2014102701 -> 2014112700
Nov 27 09:27:34 ns1 knotd[469]: warning: [metropolitanbuntu.co.za]
NOTIFY, outgoing, 41.134.2.3@53: failed (connection refused)
Nov 27 09:29:46 ns1 knotd[469]: info: remote control, received command
'reload'
Nov 27 09:29:46 ns1 knotd[469]: info: reloading configuration
Nov 27 09:29:47 ns1 knotd[469]: info: configuration reloaded
Nov 27 10:13:37 ns1 knotd[469]: info: remote control, received command
'reload'
Nov 27 10:13:37 ns1 knotd[469]: info: reloading configuration
Nov 27 10:13:37 ns1 knotd[469]: info: configuration reloaded
Nov 27 10:14:15 ns1 knotd[469]: info: remote control, received command
'reload'
Nov 27 10:14:15 ns1 knotd[469]: info: reloading configuration
Nov 27 10:14:15 ns1 knotd[469]: info: configuration reloaded
Nov 27 10:14:15 ns1 knotd[469]: info: [metropolitanbuntu.co.za] loaded,
serial 2014112700 -> 2014112701
Nov 27 10:14:15 ns1 knotd[469]: warning: [metropolitanbuntu.co.za]
NOTIFY, outgoing, 41.134.2.3@53: failed (connection refused)
THIS IS AN EXTRACT FROM MY SLAVE KNOT.CONF
remotes {
masterOnKnot { address 41.134.2.2@53; }
slaveOnKnot { address 41.134.2.3@53; }
}
zones {
# This is a default directory to place slave zone files, journals etc.
# default: ${localstatedir}/lib/knot, configured with --with-storage
# storage "/var/lib/knot";
#
#
# Example slave zone
metropolitanbuntu.co.za {
file "/var/lib/knot/db.metropolitanbuntu.co.za";
xfr-in masterOnKnot;
notify-in masterOnKnot;
}
}
root@ns2:~# knotc reload
OK
root@ns2:~# grep knot /var/log/syslog
Nov 27 08:28:15 ns2 knotd[397]: notice: [metropolitanbuntu.co.za]
NOTIFY, incoming, 41.134.194.89@10548: unauthorized request
Nov 27 08:28:15 ns2 knotd[397]: notice: [metropolitanbuntu.co.za]
NOTIFY, incoming, 41.134.194.89@13456: unauthorized request
Nov 27 08:28:15 ns2 knotd[397]: notice: [metropolitanbuntu.co.za]
NOTIFY, incoming, 41.134.194.89@60566: unauthorized request
Nov 27 08:47:30 ns2 knotd[397]: notice: [metropolitanbuntu.co.za]
NOTIFY, incoming, 41.134.194.89@54094: unauthorized request
Nov 27 09:28:36 ns2 knotd[397]: info: remote control, received command
'reload'
Nov 27 09:28:36 ns2 knotd[397]: info: reloading configuration
Nov 27 09:28:36 ns2 knotd[397]: info: [metropolitanbuntu.co.za] zone
will be bootstrapped, serial 0
Nov 27 09:28:36 ns2 knotd[397]: info: configuration reloaded
Nov 27 09:28:36 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:28:36 ns2 knotd[397]: 2014-11-27T09:28:36 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:29:01 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:29:01 ns2 knotd[397]: 2014-11-27T09:29:01 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:29:54 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:29:54 ns2 knotd[397]: 2014-11-27T09:29:54 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:30:02 ns2 knotd[397]: info: remote control, received command
'reload'
Nov 27 09:30:02 ns2 knotd[397]: info: reloading configuration
Nov 27 09:30:02 ns2 knotd[397]: info: configuration reloaded
Nov 27 09:31:49 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:31:49 ns2 knotd[397]: 2014-11-27T09:31:49 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:31:56 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:31:56 ns2 knotd[397]: 2014-11-27T09:31:56 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:32:34 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:32:34 ns2 knotd[397]: 2014-11-27T09:32:34 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:34:15 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:34:15 ns2 knotd[397]: 2014-11-27T09:34:15 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:37:59 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:37:59 ns2 knotd[397]: 2014-11-27T09:37:59 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 09:45:29 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 09:45:29 ns2 knotd[397]: 2014-11-27T09:45:29 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 10:00:45 ns2 knotd[397]: error: [metropolitanbuntu.co.za] AXFR,
incoming, 41.134.2.2@53: failed (connection refused)
Nov 27 10:00:45 ns2 knotd[397]: 2014-11-27T10:00:45 error:
[metropolitanbuntu.co.za] AXFR, incoming, 41.134.2.2@53: failed
(connection refused)
Nov 27 10:14:26 ns2 knotd[397]: info: remote control, received command
'reload'
Nov 27 10:14:26 ns2 knotd[397]: info: reloading configuration
Nov 27 10:14:26 ns2 knotd[397]: info: configuration reloaded
--
--
Kind Regards
Eric Kom
Senior IT Manager - Metropolitan Schools
_________________________________________
/ You are scrupulously honest, frank, and \
| straightforward. Therefore you have few |
\ friends. /
-----------------------------------------
\
\
.--.
|o_o |
|:_/ |
// \ \
(| Kom | )
/'\_ _/`\
\___)=(___/
2 Hennie Van Till, White River, 1240
Tel: 013 750 2255 | Fax: 013 750 0105 | Cell: 078 879 1334
erickom(a)kom.za.net |erickom(a)metropolitancollege.co.za www.kom.za.net |
www.kom.za.org |www.erickom.co.za
Key fingerprint: 513E E91A C243 3020 8735 09BB 2DBC 5AD7 A9DA 1EF5
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users