Problem with unknown 64.68.203.197 from zoneedit

HL1234

New Member
Hello please help me. I got some problems I can not identify.

I have with ZoneEdit (Control Panel Domain Administration) a secondary DNS for my domain svman.de configured.
Q1) but still now at the control panel I see:
Status: Domain Parked! Have the DNS Settings Been Entered?
What is this with this "domain parking"

In Info here (in Control Panel Domain Administration) it is written:
Domain Details: Domain Status: Active
DNS Settings: primary name servers
---> so that looks good

in zone cache (in Control Panel Domain Administration) stands:
svman.de zone cache
svman.de. 3600 IN NS ns1.svman.de. PRIMARY
svman.de. 3600 IN NS dns1.zoneedit.com. SLAVE
svman.de. 3600 IN NS dns2.zoneedit.com. SLAVE

in "Edit Primary Name Servers" (when called from Control Panel Domain Administration) is was written what do to:
"Please add the following IP addresses to your master nameserver ACL
64.68.198.91
64.68.198.183
..."

So I had done this in named.conf on my DNS server
zone "svman.de" in {
type master;
file "myfile";
allow-transfer { 64.68.198.91/32; 64.68.198.183/32; };
also-notify { 64.68.198.91; 64.68.198.183; };
notify yes;
allow-query { any; };
allow-update { none; };
};

Q2) But I get this errors with the IP 64.68.203.197 from zoneedit.
What is going wrong here?
and in addition with command:
#hostname
I get 64.68.203.197 but like "svman.de" before?

In /var/log/messages are many errors about the IP 64.68.203.197. I thing yes that's right. I have never allowed a transfer for 64.68.203.197, but for 64.68.198.91 and 64.68.198.183.
content of /var/log/messages:
named[47751]: client 64.68.203.197#28717 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#28866 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#28044 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#2261 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#2899 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#11502 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#9939 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#24833 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#17372 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#23605 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#25649 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#16805 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#21180 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#25289 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#6582 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#13946 (svman.de): zone transfer 'svman.de/AXFR/IN' denied
named[47751]: client 64.68.203.197#25906 (svman.de): zone transfer 'svman.de/AXFR/IN' denied

I was never been told (at the Control Panel Domain Administration) to use "64.68.203.197".
Q3) I do not understand, from where comes this IP? And why my hostname of my server now becomes "64.68.203.197" but "svman.de"?

and Q4) An another behaving with the domain name "dns2.zoneedit.com " I should use how I've been told in Control Panel Domain Administration:

dns2.zoneedit.com gives not the full answer?

; <<>> DiG 9.10.6 <<>> @dns1.zoneedit.com svman.de
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36578
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 6
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;svman.de. IN A

;; ANSWER SECTION:
svman.de. 3600 IN A 78.47.225.20

;; AUTHORITY SECTION:
svman.de. 3600 IN NS dns2.zoneedit.com.
svman.de. 3600 IN NS dns1.zoneedit.com.
svman.de. 3600 IN NS ns1.svman.de.

;; ADDITIONAL SECTION:
ns1.svman.de. 3600 IN A 78.47.225.20
dns1.zoneedit.com. 300 IN A 31.220.0.12
dns1.zoneedit.com. 300 IN AAAA 2a00:1ca8:2c::1:1686
dns2.zoneedit.com. 300 IN A 166.88.18.58
dns2.zoneedit.com. 300 IN AAAA 2607:f358:1:ffc0::11

;; Query time: 16 msec
;; SERVER: 2a00:1ca8:2c::1:1686#53(2a00:1ca8:2c::1:1686)
;; WHEN: Di. Nov. 21 13:59:20 CET 2017
;; MSG SIZE rcvd: 225

[64.68.203.197 /root] => dig @dns2.zoneedit.com svman.de

; <<>> DiG 9.10.6 <<>> @dns2.zoneedit.com svman.de
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15402
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;svman.de. IN A

;; ANSWER SECTION:
svman.de. 3600 IN A 78.47.225.20

;; Query time: 165 msec
;; SERVER: 2607:f358:1:ffc0::11#53(2607:f358:1:ffc0::11)
;; WHEN: Di. Nov. 21 13:59:28 CET 2017
;; MSG SIZE rcvd: 53

How we can solved that?
Thank you for your help.
 
Last edited:

sproskin

Administrator
Staff member
Hello, apologies for the delay in response.

First, it should be noted that 64.68.203.197 has nothing to do with zone transfers. This IP address shouldn't be used in your configuration. All zone transfers from your primary should be going to 64.68.198.91 & 64.68.198.93.

I just did a test, and the XFR system at Zoneedit is able to properly pull your zone for svman.de from 78.47.225.20. It's also noteworthy that your nameservers (Including Zoneedit's) seem to have the same serial number: 2017101901

Are you still having issues? Please let me know.
 

HL1234

New Member
Yes,
first thanks for your comment.

"All zone transfers from your primary should be going to 64.68.198.91 & 64.68.198.93."
But I'm using 64.68.198.91 and 64.68.198.183. So, the first IP as you suggest is the same. But the second is different. Should I use in named.conf in place of '64.68.198.183' now the IP '64.68.198.93'

Second: when I call the command #hostname I get this back "64.68.203.197". For one week or so it was "svman.de". I do not understand why the result of hostname has changed now?
 

HL1234

New Member
I like to give 2 images so you can better understand what I mean:
upload_2017-11-23_23-0-3.png
and then I click edit:

upload_2017-11-23_23-0-40.png

This are the both IPs I use.
 

Attachments

  • upload_2017-11-23_22-59-22.png
    upload_2017-11-23_22-59-22.png
    132.5 KB · Views: 1
Last edited:
Top