[nsd-users] Notify refused, no acl matches

[Alexander Varejão]

>
>
> >nsd[202429]: info: zone foo.bar serial [NUMBER HERE] is updated to [NUMBER
> >HERE]
>
> there is so much obfuscation here, that IMO it's impossible to assist you.
> Honestly, now, you're even obfuscating SOA serial numbers?! Obfuscation
> taken
> to a completely new level.
>
>         -JP
>
> Hi JP

I'm sorry
Consider something like that:

nsd[255715]: [2022-07-01 12:28:51.766] nsd[255715]: info: zone foo.bar
serial 53 is updated to 54

Thanks


>  Hi Alexander,
>
> Seems to me the primary is configured correctly as far as notify
> messages go. Presumably, the address from which the notify is sent is
> different, or perhaps the key doesn't match.
>
> It is probably easiest to use something like ldns-notify to test what
> the exact issue is. At least, that's the route I'd take. Don't think
> you need to test with actual zone updates, just sent a notify and NSD
> will figure out there's no new information once it passes the acl.
>
> - Jeroen
>

Hi Jeroen

Thanks for answer

Testing with ldns-notify all seems work ok

    ldns-notify   -z foo.bar   -I X.X.X.X   -y upd_key: KEY_B_HERE Z.Z.Z.Z

So my secondary server received the update with no error

      nsd[256548]: info: notify for foo.bar. from X.X.X.X

But if I try update the zone expecting  bind to notify it my secondary
server still has the same error:

        nsd[256740]: info: notify for foo.bar. from X.X.X.X. refused, no
acl matches.

:(
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20220701/9107d8cd/attachment.htm>