BIND Slave 收到來自其他 Slave 的通知？

我也有一個主名稱伺服器設置和一些從屬伺服器。今天，當我遇到一條奇怪的錯誤消息時，我正在將其中一個從屬伺服器更改為新伺服器。

在更新主伺服器上的 DNS 記錄並重新啟動 BIND 後，我注意到它ns3.mydomain.com正在嘗試發送ns4.mydomain.com通知。ns4.mydomain.com我已經檢查了配置文件，但配置文件中沒有它的 IP 地址ns3.mydomain.com。

它不應該ns1.mydomain.com將通知發送到ns4而不是ns3嗎？我還應該注意到，兩者的 DNS 記錄ns3似乎ns4都已更新。

這是 ns3 上的錯誤消息（IP 地址：）107.161.xxx.xxx：

May 15 22:08:22 vps named[23851]: client 185.38.xxx.xxx#59396: received notify for zone 'mydomain1.com'
May 15 22:08:22 vps named[23851]: zone mydomain1.com/IN: refused notify from non-master: 185.38.xxx.xxx#59396
May 15 22:08:22 vps named[23851]: client 185.38.xxx.xxx#59396: received notify for zone 'mydomain2.com'
May 15 22:08:22 vps named[23851]: zone mydomain2.com/IN: refused notify from non-master: 185.38.xxx.xxx#59396
May 15 22:08:22 vps named[23851]: client 185.38.xxx.xxx#59396: received notify for zone 'mydomain3.com'
May 15 22:08:22 vps named[23851]: zone mydomain3.com/IN: refused notify from non-master: 185.38.xxx.xxx#59396
May 15 22:08:23 vps named[23851]: client 185.38.xxx.xxx#59396: received notify for zone 'mydomain4.com'
May 15 22:08:23 vps named[23851]: zone mydomain4.com/IN: refused notify from non-master: 185.38.xxx.xxx#59396

這是 ns4 上的錯誤消息（IP 地址：）185.38.xxx.xxx：

May 15 22:08:22 uk named[572]: client 107.161.xxx.xxx#48742: received notify for zone 'mydomain1.com'
May 15 22:08:22 uk named[572]: zone mydomain1.com/IN: refused notify from non-master: 107.161.xxx.xxx#48742
May 15 22:08:22 uk named[572]: client 107.161.xxx.xxx#48742: received notify for zone 'mydomain2.com'
May 15 22:08:22 uk named[572]: zone mydomain2.com/IN: refused notify from non-master: 107.161.xxx.xxx#48742
May 15 22:08:22 uk named[572]: client 107.161.xxx.xxx#48742: received notify for zone 'mydomain3.com'
May 15 22:08:22 uk named[572]: zone mydomain3.com/IN: refused notify from non-master: 107.161.xxx.xxx#48742
May 15 22:08:22 uk named[572]: client 107.161.xxx.xxx#48742: received notify for zone 'mydomain4.com'
May 15 22:08:22 uk named[572]: zone mydomain4.com/IN: refused notify from non-master: 107.161.xxx.xxx#48742

如果您不想發送通知消息，請在notify master-only;部分options中指定或notify no;在從屬定義中指定。zone

通知消息預設發送到所有區域的名稱伺服器（基於NS區域數據中的記錄），除了SOA MNAME（另見notify-to-soa）。

我認為您需要allow-notify { address_list };在從屬區域名稱伺服器的選項中應用該語句，其中’address_list’應該是主名稱伺服器通知消息的源IP。

引用自：https://serverfault.com/questions/595382