<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Fantastic. Appreciate the response. Works perfectly now. Thank you very much.</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Anand Buddhdev <anandb@ripe.net><br>
<b>Sent:</b> Wednesday, July 20, 2022 9:32 AM<br>
<b>To:</b> Peter Fraser <p_fraser@hotmail.com>; nsd-users@lists.nlnetlabs.nl <nsd-users@lists.nlnetlabs.nl><br>
<b>Subject:</b> Re: [nsd-users] Replication Failing</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On 19/07/2022 18:55, Peter Fraser via nsd-users wrote:<br>
<br>
Hi Peter,<br>
<br>
This is a common misunderstanding with most people. They mistakenly <br>
assume that if a process is listening on port X, that it will also <br>
initiate outgoing connections from the same port X.<br>
<br>
Even though your DNS2 NSD is _listening_ on port 53000, when it makes an <br>
_outgoing_ TCP connection to DNS1 NSD for XFR of "my_domain.net", it <br>
will use a random source port. However, you are _only_ allowing <br>
connections from DNS2's IP and a specific source port in the <br>
"provide-xfr" directive on DNS1's NSD. Just remove the @53000.<br>
<br>
Regards,<br>
Anand<br>
<br>
> DNS1 with NSD.conf relevant settings<br>
> IP: 192.168.1.2<br>
> Unbound Port: 53<br>
> NSD Port: 54000<br>
> <br>
> ip-address: 192.168.1.2<br>
> do-ip4: yes<br>
> port: 54000<br>
> hide-version: yes<br>
> <br>
> pattern:<br>
> name: "dns2"<br>
> notify: 192.168.1.3@53000 NOKEY<br>
> provide-xfr: 192.168.1.3@53000 NOKEY<br>
> outgoing-interface: 192.168.1.2@54000<br>
> <br>
> zone:<br>
> name: "my_domain.net"<br>
> zonefile: my_domain.net.zone<br>
> include-pattern: "dns2"<br>
<br>
[snip]<br>
</div>
</span></font></div>
</body>
</html>