zone文件检查

解决:** server can't find cm1.p2pvpn.com: SERVFAIL
1.定位
使用named-checkzone检查
named-checkzone p2pvpn.com /etc/bind/db.p2pvpn.com
/etc/bind/db.p2pvpn.com:5: SOA record not at top of zone (p2pvpn.com.p2pvpn.com)
zone p2pvpn.com/IN: loading from master file /etc/bind/db.p2pvpn.com failed: not at top of zone

 

named-checkzone 7.0.172.in-addr.arpa  /etc/bind/db.7.0.172
/etc/bind/db.7.0.172:5: SOA record not at top of zone (7.0.172.in-addr.arpa.7.0.172.in-addr.arpa)
zone 7.0.172.in-addr.arpa/IN: loading from master file /etc/bind/db.7.0.172 failed: not at top of zone

2.修改
将文件中的二个$ORIGIN的定义去掉就可以了,定义$ORIGIN格式有错误
;p2pvpn.com
;
$ORIGIN p2pvpn.com
$TTL 604800
@ IN SOA dns.p2pvpn.com. root.p2pvpn.com. (
  1;
  604800;
  86400;
  2419200;
  604800 );
@ IN NS dns
dns IN A 172.0.7.206
cm1 IN A 172.0.7.205
改为->
$TTL 604800
@ IN SOA dns.p2pvpn.com. root.p2pvpn.com. (
                1;
                604800;
                86400;
                2419200;
                604800 );
@ IN NS dns
dns IN A 172.0.7.206
cm1 IN A 172.0.7.205
3. 检查
named-checkzone p2pvpn.com /etc/bind/db.p2pvpn.com
zone p2pvpn.com/IN: loaded serial 1
OK

named-checkzone 7.0.172.in-addr.arpa  /etc/bind/db.7.0.172
zone 7.0.172.in-addr.arpa/IN: NS 'dns.7.0.172.in-addr.arpa' has no address records (A or AAAA)
zone 7.0.172.in-addr.arpa/IN: loaded serial 1
OK

4.nslookup测试
gaoyibo@gaoyibo-desktop:~$ sudo /etc/init.d/bind9 restart
 * Stopping domain name service... bind9                                 [ OK ]
 * Starting domain name service... bind9                                 [ OK ]
gaoyibo@gaoyibo-desktop:~$ nslookup
> dns.p2pvpn.com
Server:        172.0.7.206
Address:    172.0.7.206#53

Name:    dns.p2pvpn.com
Address: 172.0.7.206