[Pdns-users] Temporarily disable SOA requirement for slave AXFR

[Christian Hofstädtler]

Michael,

On 03.09.2010, at 03:07, Michael Fincham wrote:

> Hi all,
> 
> I'm trying to set up a delegated zone on my master PowerDNS server to be
> slaved out to my slaves, however even if I pdns_control notify the
> slaves, they don't AXFR the zone instead throwing this error:
> 
> Sep  3 13:02:20 service-1 pdns[6115]: Error trying to retrieve/refresh
> 'example.com': Query to '192.0.2.1' for SOA of 'example.com' produced a
> NS record
> 
> (Obviously these aren't the real zone or IP)
> 
> The master hasn't got an SOA and shouldn't have one, so is there a way
> to avoid this check?

An AXFR zone transfer has to start and end with the SOA record. Therefore this is not a plain validity check, but rather a requirement of the DNS protocol.

I don't think you can work around that easily.

 Christian