<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Hi Chris</div><div>No you understood well.. NS1 is master, NS2 and NS3 are slave. Both get the zones from the master, but NS2 gives the error when doing a DNS check.</div><div>All have the right entries in the gui and dig does work too for all records on both NS2 and NS3.</div><div><br></div><div>Best regards</div><div>Jan</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Lucida Grande; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> Chris Gebhardt - VIRTBIZ Internet <<a href="mailto:cobaltfacts@virtbiz.com">cobaltfacts@virtbiz.com</a>><br><span style="font-weight:bold">Reply-To: </span> BlueOnyx General Mailing List <<a href="mailto:blueonyx@mail.blueonyx.it">blueonyx@mail.blueonyx.it</a>><br><span style="font-weight:bold">Date: </span> miércoles, 21 de mayo de 2014 15:41<br><span style="font-weight:bold">To: </span> <<a href="mailto:blueonyx@mail.blueonyx.it">blueonyx@mail.blueonyx.it</a>><br><span style="font-weight:bold">Subject: </span> [BlueOnyx:15432] Re: Secondary dns problem on BO<br></div><div><br></div><div><div><div>Hi Jan,</div><div>On 5/21/2014 3:07 PM, Jan Ronken wrote:</div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div> Hi all</div><div> I have a strange problem with one of our secondary BlueOnyx DNS servers.</div><div> ns2 gives</div><div><br></div><div> * DNS SERVFAIL when querying x.x.x.x for SOA</div><div><br></div><div> * Name server ns2.xxx.xxx (x.x.x.x) does not answer queries over TCP.</div><div><br></div><div> However, NS3 which is exactly running the same BO as NS2 is working OK. No</div><div> firewall, nat etc on either on.</div><div> I can dig at ns2 without problems, zones are transferred to ns2 and all 3</div><div> are fully Yum updated.</div></blockquote><div><br></div><div>I'm a little confused so bear with me as I try and walk through this </div><div>with you.</div><div><br></div><div>Do I understand correctly that you have two servers, ns2 & ns3, and they </div><div>are both running secondary zones that are served from a third server </div><div>(presumably ns1)? While ns3 is slaving the zones from ns1 as expected, </div><div>an identically-configured box ns2 is failing?</div><div><br></div><div>If that is the case then my suggestion would be to check the ns1 server. </div><div> From Server Management > Network Services > DNS, click on the Advanced </div><div>tab. Make sure that your ns2 server's MAIN IP ADDRESS is configured in </div><div>the box that says "Zone Transfer Access by IP Address" and then Save. </div><div>If your ns2 hostname is configured on a secondary IP address of another </div><div>server, don't use that secondary IP in the Zone Transfer Access box. </div><div>You want to use the primary IP of the ns2 server.</div><div><br></div><div>I hope that I have not completely misunderstood your situation and </div><div>baffled you with bad advice.</div><div>-- </div><div>Chris Gebhardt</div><div>VIRTBIZ Internet Services</div><div>Access, Web Hosting, Colocation, Dedicated</div><div>www.virtbiz.com | toll-free (866) 4 VIRTBIZ</div><div><br></div><div><br></div></div></div></span></body></html>