Simplified guide to DNS, SOA

http://rscott.org/dns/soa.html

 

TL:DR;

Make sure your SOA points to your correct DNS server via nslookup to the two name servers you think may be problematic.

Check the serial number entries (yyyymmddrr) – the largest serial number should also be on the SOA server.

If the highest serial number is on a non-authoritative server, check *that* server’s SOA, correct it.

Then temporarily:

  • set the faulty server’s serial number to something lower than that of the genuine SOA server.
  • Lower the faulty server’s Refresh interval to e.g. 600 seconds.

Wait for 10 minutes and make sure the zone on the faulty server matches the zone on the SOA server – especially the serial number.

Raise the now-fixed server’s Refresh interval back to e.g. 86400 seconds.

 

Leave a Reply

Your email address will not be published. Required fields are marked *