[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bind9-users
Subject:    Re: Error message question
From:       Barry Finkel <b19141 () achilles ! ctd ! anl ! gov>
Date:       2004-02-03 17:11:46
Message-ID: 200402031711.LAA25007 () atalanta ! ctd ! anl ! gov
[Download RAW message or body]

Ubence Quevedo <uquevedo@mcoe.org> wrote:

>Our primary external nameserver running bind 9.2.3 has a stealth secondary
>nameserver behind a firewall that is running Windows 2000 DNS.  Whenever
>there is a request from the Windows 2000 DNS Server to update/refresh its
>records, the following error is logged in my messages file:
> 
>
>Feb  1 04:20:17 ns1 named[19886]: client 206.78.128.49#2084: updating zone
>'mcoe.org/IN': update failed: 'RRset exists (value dependent)' prerequisite
>not satisfied (NXRRSET)
>
>Feb  1 04:20:17 ns1 named[19886]: client 206.78.128.49#2087: update
>'mcoe.org/IN' denied

Read RFC 2136 (DDNS); it explains NXRRSET.  Basically, there was a
DDNS request sent to your BIND server from the machine at IP address

     206.78.128.49

to update the DNS zone

     mcoe.org

The DDNS packet contained one or more pre-requisite conditions, and
one of them was not satisfied.  So BIND refused the DDNS update.
To see exactly what was requested, use a sniffer on the BIND box.
I am not sure if query logging on BIND 9 will log this DDNS
activity, as I have never had a need for the detailed packets.
----------------------------------------------------------------------
Barry S. Finkel
Computing and Instrumentation Solutions Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 222, Room D209              Internet: BSFinkel@anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994


[prev in list] [next in list] [prev in thread] [next in thread]