Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chris Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Migrating from Bind DNS to Windows 2003 DNS

Status
Not open for further replies.

HupAhh

MIS
Oct 24, 2003
60
IE
Hi all,

I have a requirement at the moment to add a legacy Bind DNS zone to a Windows 2003 server. I found this step by step guide ( and added my Windows server to the Allow Transfer section of named.conf but I still get an error in Windows saying it could not complete the zone transfer.

I restarted the Bind service on the Linux server and the DNS service on the Windows box but that didn't work. There's no firewall between the 2 servers so that isn't a problem either.

Anything else I need to check? S
Thanks,
PEB
 
How large is the zone? I seem to remember a previous message here relating to that. If it's a very large zone (lots of entries) that may cause a problem for DNS on the Windows server.

good luck,
 
Is there dnssec or keys on the bind server? Also, you might want to check using nslookup from the windows side that first you can access port 53 and second the transfer is allowed.

Start/Run/cmd:

nslookup - IPADDRESSOFLINXSERVER
> see that it resolves.

nslookup - IPADDRESSOFLINXSERVER
> ls -d zonethatyouwantotransfer.com.
(don't forget the trailing dot)
 
This is the error I get in the Windows server:

20080108 09:01:09 B1C PACKET UDP Rcv 192.1.2.4 73a4 R Q [8580 R REFUSED] (3)test(0)

I've done a bit more digging and it does look like security. I noticed that at the start of named.conf on the Linux server there's a line to include rndc.key. Do I need to copy this key to my Windows 2003 server...if so where to?

Thanks,
Paul
 
OK, found the problem....should have spotted it earlier. I had modified the allow transfer to the windows server but not allow query which should have been the first thing I did...working now, thanks for the tips.

P
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top