Skip to content

Instantly share code, notes, and snippets.

@jpmens
Created January 13, 2022 16:05
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jpmens/5e794f18b7de8524b6065942a4ed3e96 to your computer and use it in GitHub Desktop.
Save jpmens/5e794f18b7de8524b6065942a4ed3e96 to your computer and use it in GitHub Desktop.

nsd.conf

server:
	username: root
	zonesdir: "/etc/nsd"
	database: ""
	logfile: "/var/log/nsd.log"
	log-only-syslog: no
	pidfile: ""
	nsid: "ascii_nsd100b"
	round-robin: yes
	minimal-responses: yes
	refuse-any: yes
	zonefiles-write: 5
	include: "/etc/nsd/server.d/*.conf"

include: "/etc/nsd/conf.d/*.conf"

remote-control:
	control-enable: yes
	control-interface: /run/nsd/nsd.ctl

zone:
	name: "a1.dnslab.org"
	zonefile: "a1.dnslab.org"
	request-xfr: 137.184.55.191 NOKEY
	allow-notify:  137.184.55.191 NOKEY

query

; <<>> DiG 9.16.22 <<>> @142.93.164.149 a1.dnslab.org +multi +norec +nsid
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6348
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 6e 73 64 31 30 30 62 ("nsd100b")
;; QUESTION SECTION:
;a1.dnslab.org.		IN A

;; AUTHORITY SECTION:
a1.dnslab.org.		30 IN SOA mname.a1.dnslab.org. jp.a1.dnslab.org. (
				5          ; serial
				180        ; refresh (3 minutes)
				60         ; retry (1 minute)
				497        ; expire (8 minutes 17 seconds)
				30         ; minimum (30 seconds)
				)

;; Query time: 19 msec
;; SERVER: 142.93.164.149#53(142.93.164.149)
;; WHEN: Thu Jan 13 15:58:08 UTC 2022
;; MSG SIZE  rcvd: 98

logfile

[2022-01-13 15:52:16.616] nsd[45520]: notice: nsd starting (NSD 4.3.8)
[2022-01-13 15:52:16.738] nsd[45522]: notice: nsd started (NSD 4.3.8), pid 45521
[2022-01-13 15:52:16.944] nsd[45521]: info: zone a1.dnslab.org serial 0 is updated to 5
[2022-01-13 15:55:03.142] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191
[2022-01-13 15:55:58.339] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191
[2022-01-13 15:57:51.540] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191
[2022-01-13 16:00:19.739] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191
[2022-01-13 16:00:30.939] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191
[2022-01-13 16:00:32.940] nsd[45521]: error: xfrd: zone a1.dnslab.org has expired
[2022-01-13 16:00:33.136] nsd[45521]: error: xfrd: zone a1.dnslab.org received error code SERVER NOT AUTHORITATIVE FOR ZONE from 137.184.55.191

query after expiry

; <<>> DiG 9.16.22 <<>> @142.93.164.149 a1.dnslab.org +multi +norec +nsid
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 36185
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; NSID: 6e 73 64 31 30 30 62 ("nsd100b")
; EDE: 24 (Invalid Data): (Zone has expired)
;; QUESTION SECTION:
;a1.dnslab.org.		IN A

;; Query time: 24 msec
;; SERVER: 142.93.164.149#53(142.93.164.149)
;; WHEN: Thu Jan 13 16:00:38 UTC 2022
;; MSG SIZE  rcvd: 75
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment