DNSonly problem

[simonas]

Hello developers,

I just noticed this insane thing.

I have multiple servers:
domain1.com first NS - server itself, secondary - ns1.dnsonly.com
domain2.com first NS - server itself, secondary - ns1.dnsonly.com
domain3.com first NS - server itself, secondary - ns1.dnsonly.com

One DNSonly server:
ns1.dnsonly.com

I have set servers (domain1.com, domain2.com domain3.com) DNS clusters to "Synchronize changes" to ns1.dnsonly.com server (one way, right), and UNchecked " Setup Reverse Trust Relationship".

That means domain1.com, domain2.com domain3.com only outgoing changes to ns1.dnsonly.com right?
WRONG!

After some time domain1.com, domain2.com and domain3.com began sharing records.
When i make "Synchronize all zones to all servers" all zones are synchronized in all servers.

How? I do not provide ns1.dnsonly.com any access to servers.

"Synchronize all zones to all servers" is useful when more than one DNSonly server will come online, but i don't get how it syncs with other servers.

To be clear:
ns1.dnsonly.com - There are currently no servers in your DNS cluster.
And servers only with one arrow to the ns1.dnsonly.com .


Can anybody clarify this?

 

[simonas]

Got it fixed.
Had to set DNS roles to "Write-only".
Click synchronize in all 3 servers.
This removed zones from foreign servers.

DNS only server had bad records, so deleted /var/named
Clicked syncronize on all 3 server again.

And everything is great now.

 

[simonas]

I was wrong. I was looking only at the DNS db files,

Cpanel still lists all non-existing domains.
When i do dns cleanup it says etc/named.conf if not correct.

Already tried repairing etc/named.conf via ssh scripts

Cpanel still lists them, won't allow to delete.

Please help

 

[quietFinn]

After some time domain1.com, domain2.com and domain3.com began sharing records.
When i make "Synchronize all zones to all servers" all zones are synchronized in all servers.

That is how it works.
Get used to it or don't use it.
That's why I don't use it.

 

[simonas]

quietFinn, thanks for responding.

But i expect a word from developers and actual problem solving.