[Pdns-users] AXFR chunk error: Server Not Authoritative for zone / Not Authorized

[a b]

> Which version does the master run?

3.4.5.

> Can you tcpdump for us?

Absolutely. I'll send you the dump privately to any e-mail address of your choice.
Just like the good old times, eh? (:-)
Any particular invocation you'd like me to run? Remember, I'll be using snoop(1M).

> Can you reproduce
> using a recent powerdns version on master?

Not sure what you mean...?

> Will the master answer to 'dig -t axfr 16.172.in-addr.arpa @172.16.2.4' from
> your slave?

Nope!
# dig -t axfr 16.172.in-addr.arpa @172.16.2.4

; <<>> DiG 9.3.6-P1 <<>> -t axfr 16.172.in-addr.arpa @172.16.2.4
;; global options:  printcmd
; Transfer failed.

In fact, the supermaster will not even answer this query when it is asked locally
on the supermaster, but will answer it it is asked locally like this:

# dig -t axfr 16.172.in-addr.arpa @127.0.0.1
 		 	   		   		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20150830/a0d8c577/attachment-0001.html>