Zone Transfer issue - Need help badly

[wchull]

I'm having a problem and need help badly. Here is the issue.

I'm running Windows 2000 Server and I have over 100 primary zones that are Active Directory Integrated zones and all of these zones are configured to allow zone transfers to any server.

Of these 100 AD integrated zones I have two zones that have stopped allowing zone transfers to other secondary DNS servers in our environment.

I have tried removing the secondary zones on the secondary dns and recreating them but when I finish the secondary zones never completes that zone transfer. I have also re-created the primary zones prior to creating the secondary zones and the secondary zones never complete the zone transfers. I have also deleted the zones from Active Directory and have recreated them as a Primary non-ADIntegrated zones and still no luck in being able to create a secondary zone that can complete a zone transfer. Note also that it doesn't matter what secondary DNS server I try create the secondary zone on the zone transfer always fails. This also fails on brand new secondary DNS servers ... the zone transfer never completes between the primary and secondar zones.

So far I can find no errors being reported as to what or why the zone transfers are failing and I'm stumped as to how to fix this problem. It's almost like the 2 zones was setup not to allow zone tranfers or only transfers to specific servers and that the configuration to allow zone transfers to any server has failed to set properly. Note that I have tried changing the setting specifying that zone transfers are allowed to my secondary DNS servers but I still cannot get the zone transfer to complete.

Can anyone help me resolve this issue so I can get these two zones to perform a zone transfer?

 

[netometer]

Hi!
We need more info about your configuration.
What type of connection do you have between the Primary and Secondary DNS servers?
Zone transfers are performed by using port TCP 53 by default (only the client requests are answered over port UDP 53). Check whether port TCP 53 is not blocked.
I would recommend you to put a sniffer (Ethereal is free) and check what is happening – does the primary server get a request for a zone transfer when you initiate it from the secondary, what kind of answer does it send etc.
Can you enable the Debug logging feature of the primary and secondary server and post here the logs that concern this zone transfers?
And I am sorry to ask this stupid question but how long did you wait for the zone transfer to happen?

NetoMeter

http://www.netometer.net

 

[ITPangaeaArchitect]

also, run netdiag /v and check teh hotfix list to see if you have 893066...if so, check the file versions to match those in

http://www.microsoft.com/technet/security/bulletin/ms05-019.mspx

if you have lower version numbers...apply this patch...its gonna be a required one if you want communications to happen reliably, or at all

it was fixed back in june, so hopefully you have the current version


in your DNS server properties on teh logging tab..do you have everything checked in there??

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there