dns 主从同步问题，请帮诊断一下，谢谢

coolda

master:dns1.xxx.com

slave:192.168.2.108(有一外网ip，NAT 53端口进去到192.168.2.10

netstat -an看到53是开放的,并且nc -u slaveip 53 提交数据也可以收到

但就是为什么192.168.2.108老回应master udp port  不可达，搞不明白。


下面是master和slave 数据包传输的抓包


oot@dns2 ~]# tcpdump host dns1.xxx.com
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes

00:32:55.932585 IP 192.168.2.108.44029 > dns1.xxx.com.domain:  12712+ PTR? 251.0.0.224.in-addr.arpa. (42)
00:32:55.934622 IP 192.168.2.108.48056 > dns1.xxx.com.domain:  4074+ PTR? xx.xx.xx.xx.in-addr.arpa. (44)
00:32:55.949640 IP dns1.xxx.com.domain > 192.168.2.108.44029:  12712 NXDomain 0/1/0 (100)
00:32:55.949918 IP dns1.xxx.com.domain > 192.168.2.108.48056:  4074* 1/1/1 (102)
00:32:55.951367 IP 192.168.2.108.49186 > dns1.xxx.com.domain:  46948+ PTR? 108.2.168.192.in-addr.arpa. (44)
00:32:55.967364 IP dns1.xxx.com.domain > 192.168.2.108.49186:  46948 NXDomain 0/1/0 (121)
00:34:55.019836 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  40361 notify [b2&3=0x2400] [1a] SOA? xxx.com. (6
00:34:55.019938 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 104
00:34:55.020140 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  57325 notify [b2&3=0x2400] [1a] SOA? hhh.com (67)
00:34:55.020150 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:34:55.020228 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  34765 notify [b2&3=0x2400] [1a] SOA? yyy.com. (67)
00:34:55.020237 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:34:55.020435 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  4864 notify [b2&3=0x2400] [1a] SOA? zzz.com. (69)
00:34:55.020458 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 105
00:35:10.021061 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  40361 notify [b2&3=0x2400] [1a] SOA? xxx.com. (6
00:35:10.021141 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 104
00:35:10.021302 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  57325 notify [b2&3=0x2400] [1a] SOA? hhh.com (67)
00:35:10.021314 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:35:10.021435 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  34765 notify [b2&3=0x2400] [1a] SOA? yyy.com. (67)
00:35:10.021444 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:35:10.021450 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  4864 notify [b2&3=0x2400] [1a] SOA? zzz.com. (69)
00:35:10.021457 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 105
00:35:25.021727 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  34765 notify [b2&3=0x2400] [1a] SOA? yyy.com. (67)
00:35:25.021785 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:35:25.021801 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  40361 notify [b2&3=0x2400] [1a] SOA? xxx.com. (6
00:35:25.021809 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 104
00:35:25.021815 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  57325 notify [b2&3=0x2400] [1a] SOA? hhh.com (67)
00:35:25.021821 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 103
00:35:25.021826 IP dns1.xxx.com.49389 > 192.168.2.108.domain:  4864 notify [b2&3=0x2400] [1a] SOA? zzz.com. (69)
00:35:25.021833 IP 192.168.2.108 > dns1.xxx.com: ICMP 192.168.2.108 udp port domain unreachable, length 105