Here is some of the pertinent information:
OS Version: CentOS Stream release 8
Kernel: 4.18.0-408.el8.x86_64
named.conf of master:
Code: Select all
acl "networks" {
a bunch of subnets;
};
options {
listen-on port 53 { 127.0.0.1; <ipv4 of server>; };
listen-on-v6 port 53 { ::1; <ipv6 of server>; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { any; };
allow-transfer { localhost; <slave ip>; };
allow-recursion { localhost; networks; };
allow-recursion-on { localhost; networks; };
notify yes;
recursion yes;
dnssec-enable yes;
dnssec-validation auto;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.root.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
forwarders { 8.8.8.8; 8.8.4.4; 208.67.221.76; 208.67.223.76; };
};
logging {
channel default_debug {
file "data/named.run";
print-time yes;
print-category yes;
print-severity yes;
severity info;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "1ofmany.com" IN {
type master;
file "1ofmany.com";
allow-update { none; };
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
named.conf of slave:
Code: Select all
acl "networks" {
a bunch of subnets;
};
options {
listen-on port 53 { 127.0.0.1; <ipv4 of server>; };
listen-on-v6 port 53 { ::1; <ipv6 of server>; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { any; };
allow-recursion { localhost; networks; };
allow-recursion-on { localhost; networks; };
notify yes;
recursion yes;
dnssec-enable yes;
dnssec-validation auto;
dnssec-lookaside auto;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.root.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
forwarders { 8.8.8.8; 8.8.4.4; 208.67.221.76; 208.67.223.76; };
};
logging {
channel default_debug {
file "data/named.run";
print-time yes;
print-category yes;
print-severity yes;
severity info;
};
};
zone "." IN {
type hint;
file "named.ca";
};
zone "1ofmany.com" IN {
type slave;
file "slaves/1ofmany.com";
masters { <ips of master>; };
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
Code: Select all
general: warning: managed-keys-zone: Unable to fetch DNSKEY set '.': timed out
lame-servers: info: connection refused resolving './NS/IN': 199.7.91.13#53
lame-servers: info: connection refused resolving 'pool.ntp.org/A/IN': 199.7.91.13#53
managed-keys-zone: journal file is out of date: removing journal file