-
Notifications
You must be signed in to change notification settings - Fork 758
Description
Important notices
Before you add a new report, we ask you kindly to acknowledge the following:
- I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- The title contains the plugin to which this issue belongs
Describe the bug
When removing a DNS entry from a zone in the BIND plugin, the zone serial doesn't change.
When used in combination with zone transfers, the secondary server(s) therefore get(s) out of sync and the deleted entry still resolves on those.
Interestingly, the BIND of the primary nameserver (the OPNsense instance) does NOT resolve the entry anymore, although the serial didn't change.
To Reproduce
Steps to reproduce the behavior:
- Check zone prior to doing any changes:
$ dig +short SOA example.com @ns1.example.com ns1.example.com. admin.example.com. 2507041206 $ dig +short SOA example.com @ns2.example.com ns1.example.com. admin.example.com. 2507041206 - Go to Services > Bind > Configuration > Primary Zones
- Create an entry (e.g.
test A 0.0.0.0) and save - Check zone:
$ dig +short SOA example.com @ns1.example.com ns1.example.com. admin.example.com. 2507041209 $ nslookup test.example.com ns1.example.com Name: test.example.com Address: 0.0.0.0 $ dig +short SOA example.com @ns2.example.com ns1.example.com. admin.example.com. 2507041209 $ nslookup test.example.com ns2.example.com Name: test.example.com Address: 0.0.0.0 - Delete the test entry and save
- Check zone again:
See that the serial hasn't changed and the results are different for primary/secondary nameserver.
$ dig +short SOA example.com @ns1.example.com ns1.example.com. admin.example.com. 2507041209 $ nslookup test.example.com ns1.example.com ** server can't find test.idial.fh-dortmund.de: NXDOMAIN $ dig +short SOA example.com @ns2.example.com ns1.example.com. admin.example.com. 2507041209 $ nslookup test.example.com ns2.example.com Name: test.example.com Address: 0.0.0.0
Expected behavior
Any edit to a zone should change its serial, including deleting entries.
Screenshots
...
Relevant log files
...
Additional context
...
Environment
OPNsense 25.1.10 (amd64) with os-bind 1.33_1 (containing bind920 version 9.20.10).