slave dns fails w/o primary dns

[dthims]

setup - one primary dns and one slave dns. zone transfer works, internet works, dig lookup works. if i bring down the primary, everything stops working. should'nt the slave dns pick up the slack when the primary dns goes down.

zone "2.168.192.in-addr.arpa." IN {
type slave;
file "slaves/192.168.2.db";
masters { 192.168.2.5 port 53;
};
};
zone "aaa.com." IN {
type slave;
file "slaves/aaa.com.db";
masters { 192.168.2.5 port 53;
};
};
options {
listen-on port 53 { 127.0.0.1; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; };
recursion yes;

dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;

/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

[Lazydog]

After you bring down the master server try to do a lookup using;

dig @<slave> <somehost>

replacing slave with the ip address of the slave server and somehost with a host that would normally resolve.

Not sure with server this config is from but the allow-query { localhost; }; is only accepting queries from the localhost, if this config is on the slave, that would be one reason why it is not working.

You should at least have your local network in there in this is an internal only dns server.

[dthims]

i will do that, thnx.