need help urgent (DNS problem)

[approx]

Hi all,

I got DNS clustering problem on my servers. I always receive this error

zone xxxxxxx.xxx/IN: zone serial has gone backwards

The DNS always changed about 10 mins interval. Can someone please tell me what happend?

Thank you before

 

[visiox]

hi there,

that means that the serial number of your master is lower than the one in the slave server.
In that case (in most cases) the slave server doesn't care about updates from the master.

 

[approx]

Hi,

I'm using clustered DNS. I already changed the serials to 2007051801. Then the serials goes back to 2007151002 again. Any solution?

 

[visiox]

Well...

...bind-manual...

The solution to this is to add 2147483647 (2^31-1) to the number, reload the zone and make sure all slaves have updated to the new zone serial number, then reset the number to what you want it to be, and reload the zone again.

 

[approx]

Well...

...bind-manual...

The solution to this is to add 2147483647 (2^31-1) to the number, reload the zone and make sure all slaves have updated to the new zone serial number, then reset the number to what you want it to be, and reload the zone again.

you didn't get what i mean. it's clustered dns. not just master and slave. all zone already syncronized, but after 5 - 15 mins, it says that the serials going backwards on /var/log/messages

 

[visiox]

Ah, ok, sorry.

Hmm... how about some more information? Maybe it will help.
How many servers are in your cluster? which one is getting the message? how about some logfile entrys? named.conf?

i guess that one of these servers should have an log entry with a error message beside "zone serial has gone backwards". maybe a firewall issue in some strange kind? "trusted" acl ?

 

[jrehmer]

Hi,

I'm using clustered DNS. I already changed the serials to 2007051801. Then the serials goes back to 2007151002 again. Any solution?

You have your answer, 2007151002 is greater than 2007051801 therefore it will always copy the "newer" version. Find the server that has the 2007151002 version and modify it.

 

[approx]

lol sorry wrong typing.. i mean 200705 not 15