Nsd "out of zone data" -> SERVFAIL

[paul]

Hi,

my nsd setup is not working, even after purging nsd and bind9, deleting the config files and reinstalling it via sudo mailinabox.

After disabling the nsd service and starting it via sudo ncd -d I am getting following error message:
[1455282545] nsd[21144]: error: petring.org.txt.signed:3: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:4: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:5: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:6: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:7: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:8: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:11: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:12: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:15: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:16: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:17: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:18: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:19: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:20: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:23: out of zone data [1455282545] nsd[21144]: error: petring.org.txt.signed:24: out of zone data
So I looked them up:

line 3 for example looks like that:
ns1.mail. 1800 IN A 144.76.64.66
most of the other lines also start with ns1.mail or ns2.mail.

But digging any URL (also the ones without error line) of the nsd server via dig @server url fails with:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 46574 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

The nsd4 code probably giving the error (./trunk/zonec.c l 1416)

if (!domain_is_subdomain(rr->owner, zone->apex)) { if(zone_is_slave(zone->opts)) zc_warning_prev_line("out of zone data"); else zc_error_prev_line("out of zone data"); return 0; }

suggests something depending subdomains, which seems reasonable since all other lines to not have “two subdomains”.

How do I fix that?

Any help is really appreciated, I’m kinda out of things to do

Thanks in advance

EDIT:

When I change the mentioned line 3 to ns.mail.petring.org the error doesn’t occur anymore, but digging stil fails.

[paul]

Adding the complete domains to the subdomains ns1.mail. and ns2.mail. solved the issue.

[JoshData]

Did you somehow type an extra period when you entered the box’s hostname or any mail users or aliases, or somehow didn’t give the box a proper hostname? In the zone line

ns1.mail. 1800 IN A 144.76.64.66

there should not be a period after mail. (Removing the period would fix it, but of course the file will get overridden by Mail-in-a-Box later, so that’s not a proper fix.)

[paul]

I couldn’t find any extra dots in my setup, but you are right mailinabox overwrites my solution when I change something regarding the DNS setup… How can I avoid that?

When I run sudo mailinabox the hostname of the machine is mail.petring.org, when I run the command “hostname” it’s just petring.

Thanks in advance

[JoshData]

What about any custom DNS records that might be bad?

[paul]

You are my hero I really had ns1.mail… as dns entries, and ns2.mail… entries. I think this happend while not understanding the interface and the backend not checking for entries ending with a dot.

Thanks!