weird named problem - new dns entries are not recognized!

Discussion in 'ISPConfig 3 Priority Support' started by craig baker, Apr 29, 2023.

  1. craig baker

    craig baker Member HowtoForge Supporter

    I added a couple new domains to my dns server (current ispconfig) and all seemed to work properly - however I discover that these 2 recents names have not propagated upwards! cant ping or nslookup them.
    and though I added a 'also notify' to inform the secondary dns, it does not get the new records and when I tell it to create the record (and point to my dns as the master) it gets a NOTAUTH response and cannot transfer the zone.

    all other domains seem to be working properly so what might be the problem? where do I start looking!
    thanks as always!
    cdb.
     
  2. craig baker

    craig baker Member HowtoForge Supporter

    I notice further that though I create a zone and save it in ispconfig - it is NOT added to the named.conf.local in /etc
    but pri.mydomain.com exists in /var/named and looks right
    --snip--
    $TTL 3600
    @ IN SOA ns10.cdbsystems.com. cdb.theeldestgeek.com. (
    2023042902 ; serial, todays date + todays serial #
    7200 ; refresh, seconds
    540 ; retry, seconds
    604800 ; expire, seconds
    3600 ) ; minimum, seconds
    ;

    mydomainname.com. 3600 A 204.111.190.136
    mail 3600 A 204.111.190.136
    www 3600 A 204.111.190.136
    mydomainname.com. 3600 CAA 0 issue "letsencrypt.org"
    mydomainname.com. 3600 MX 10 mail.mydomainname.com.
    mydomainname.com. 3600 NS ns10.cdbsystems.com.
    mydomainname.com. 3600 NS ns4.cdbsystems.com.
    mydomainname.com. 3600 TXT "v=spf1 mx a ~all"
    --snip--
    so I guess thats why they are not being percolated upwards!
    why is it not being added to named.conf.local?
     
  3. craig baker

    craig baker Member HowtoForge Supporter

    Further enlightenment I notice others reporting this issue last fall - and indeed when i UNCHECK DNSSEC, the record gets added to named.conf.local. I'm assuming it will now percolate upwards?
    but on one of the fixes (change entropy from 400 to 200 in the ispconfig bind php - its already 200.
    anything else need to be changed?
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    What happens if you re-enable DNSSEC?
     

Share This Page