BIND从站无法接收区域文件 – SERVFAIL

我一直在抨击绑定手册和谷歌的头几个小时绑定得出这个想法，但我不知道我在哪里搞砸了。 我在一些本地虚拟机上构build了这个，而奴隶和主服务器没有任何问题。 这两个子网之间的防火墙不会阻塞任何东西。 两个虚拟机都有firewalld接受udp端口53的数据，并有一个永久性的exception。 任何build议将不胜感激。 configuration设置，以便从两个位置的DHCP将更新主DNS，然后DNS将填充DNS从属。 为了空间的原因，我删除了一些默认的named.conf文本（没有包括的东西很可能是默认的）。 这一切都运行在Centos 7上。

启动时出错在从机上命名

Jun 14 12:54:07 dns-vm-pa-01 named[26045]: running Jun 14 12:54:07 dns-vm-pa-01 systemd[1]: Started Berkeley Internet Name Domain (DNS). Jun 14 12:54:07 dns-vm-pa-01 named[26045]: zone 1.0.10.in-addr.arpa/IN: Transfer started. Jun 14 12:54:07 dns-vm-pa-01 named[26045]: transfer of '1.0.10.in-addr.arpa/IN' from 10.0.0.5#53: connected using 10.0.1.5#36381 Jun 14 12:54:07 dns-vm-pa-01 named[26045]: transfer of '1.0.10.in-addr.arpa/IN' from 10.0.0.5#53: failed while receiving responses: SERVFAIL Jun 14 12:54:07 dns-vm-pa-01 named[26045]: transfer of '1.0.10.in-addr.arpa/IN' from 10.0.0.5#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.146 secs (0 bytes/sec) Jun 14 12:54:08 dns-vm-pa-01 named[26045]: zone int.bubbhashramp.com/IN: Transfer started. Jun 14 12:54:08 dns-vm-pa-01 named[26045]: transfer of 'int.bubbhashramp.com/IN' from 10.0.0.5#53: connected using 10.0.1.5#36067 Jun 14 12:54:08 dns-vm-pa-01 named[26045]: transfer of 'int.bubbhashramp.com/IN' from 10.0.0.5#53: failed while receiving responses: SERVFAIL Jun 14 12:54:08 dns-vm-pa-01 named[26045]: transfer of 'int.bubbhashramp.com/IN' from 10.0.0.5#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.155 secs (0 bytes/sec) 

主站上的NetStat结果

 udp 0 0 10.0.0.5:53 0.0.0.0:* 26141/named 

/ var / named / dynamic /

• 为VPS帐户设置DNS托pipe服务提供商
• 重写URL，但有PHP读取旧的URL
• 虚拟机 – Windows Server上的DNS主机名问题
• DNS服务器如何响应缺less胶水logging？
• Windows远程桌面会话主机高可用性login

 -rw-r--r--. 1 root named 374 Jun 14 10:43 0.0.10.in-addr.arpa -rw-r--r--. 1 root named 372 Jun 14 10:04 1.0.10.in-addr.arpa -rw-r--r--. 1 root named 567 Jun 14 12:31 int.bubbhashramp.com 

从大师挖掘答复

 dig @10.0.0.5 vmhost-01.int.bubbhashramp.com ; <<>> DiG 9.8.3-P1 <<>> @10.0.0.5 vmhost-01.int.bubbhashramp.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21900 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;vmhost-01.int.bubbhashramp.com. IN A ;; ANSWER SECTION: vmhost-01.int.bubbhashramp.com. 10800 IN A 10.0.1.10 ;; AUTHORITY SECTION: int.bubbhashramp.com. 10800 IN NS dns-vm-pa-01.int.bubbhashramp.com. int.bubbhashramp.com. 10800 IN NS dns-vm-nh-01.int.bubbhashramp.com. ;; ADDITIONAL SECTION: dns-vm-nh-01.int.bubbhashramp.com. 10800 IN A 10.0.0.5 dns-vm-pa-01.int.bubbhashramp.com. 10800 IN A 10.0.1.5 ;; Query time: 55 msec ;; SERVER: 10.0.0.5#53(10.0.0.5) ;; WHEN: Tue Jun 14 13:05:34 2016 ;; MSG SIZE rcvd: 146 

主configuration

 key "rndc-key" { algorithm hmac-md5; secret "bubbgumpkeys"; }; options { listen-on port 53 { 10.0.0.5; }; listen-on-v6 port 53 { any; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { any; }; allow-transfer { 10.0.0.0/16; }; recursion yes; dnssec-enable yes; dnssec-validation yes; bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; forwarders { 8.8.8.8; 75.75.75.75; 8.8.4.4; }; }; zone "int.bubbhashramp.com" { type master; file "dynamic/int.bubbhashramp.com"; allow-update { key rndc-key; }; }; zone "1.0.10.in-addr.arpa" { type master; file "dynamic/1.0.10.in-addr.arpa"; allow-update { key rndc-key; }; }; zone "0.0.10.in-addr.arpa" { type master; file "dynamic/0.0.10.in-addr.arpa"; allow-update { key rndc-key; }; }; 

从站configuration

 options { listen-on port 53 { any; }; listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { any; }; recursion no; dnssec-enable yes; dnssec-validation yes; bindkeys-file "/etc/named.iscdlv.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key"; forwarders { 8.8.8.8; 75.75.75.75; 8.8.4.4; }; }; zone "int.bubbhashramp.com" { type slave; file "slaves/int.bubbhashramp.com"; masters { 10.0.0.5; }; }; zone "1.0.10.in-addr.arpa" { type slave; file "slaves/1.0.10.in-addr.arpa"; masters { 10.0.0.5; }; };