Hi Petr,
Please, do you know version of the MS domain controller?
Could you send us the logs and pcap to knot-dns(a)labs.nic.cz ?
Thanks,
Daniel
On 2020-04-27 11:44, Petr Baloun wrote:
Hi,
I've setup knot to AXFR 24 zones from our MS domain controllers but
three zones fail mysteriously. After enabling debug logging
knot adds additional line with the reason - 'trailing data'.
In the pcap file created with tcpdump I see that our server starts to
send TCP resets in the middle of the transfer.
Each time resets are sent after downloading approximately the same
amount of data, this amount differ for each zone (81kb for one, 49kb
for
the second).
I am able to download the zone with dig or kdig. We also have a
different server with powerdns which is able to download the zones
without problems.
I've also tried to setup different server (with bind9) serving one of
the zones and have knot to download it from there. It worked just fine.
I can send the log file snippet (with zone name and ip addresses) as
well as the pcap file off the record.
Could you, please, help me with solving this problem?
Thank you,
Petr Baloun
Je dobré vědět, že tento e-mail a přílohy jsou důvěrné. Pokud spolu
jednáme o uzavření obchodu, vyhrazujeme si právo naše jednání kdykoli
ukončit. Pro fanoušky právní mluvy - vylučujeme tím ustanovení
občanského zákoníku o předsmluvní odpovědnosti. Pravidla o tom, kdo u
nás a jak vystupuje za společnost a kdo může co a jak podepsat
naleznete zde<https://onas.seznam.cz/cz/podpisovy-rad-cz.html>
You should know that this e-mail and its attachments are confidential.
If we are negotiating on the conclusion of a transaction, we reserve
the right to terminate the negotiations at any time. For fans of
legalese—we hereby exclude the provisions of the Civil Code on
pre-contractual liability. The rules about who and how may act for the
company and what are the signing procedures can be found
here<https://onas.seznam.cz/cz/podpisovy-rad-cz.html>.