Rubin Shrestha
Rubin Shrestha
Blog

Getting error: zone XXXX/IN subdomain/NS ‘ns4’ (out of zone) has no addresses records (A or AAAA)

by |Published

I am pulling my hairs out trying to setup delegation in BIND9. This is on some network isolated frowaway VMs so I am posting actual zon files and IP address. I have zone tst.hcinfotech.ch (parent) which should delegate to a.tst.hcinfotech.ch (child). Child zone is configured and correctly resolving. I can reach it from the parent primary nameserver with dig and get the correct response. Parent zone is working and resolving correctly. I am now trying to configure delegation and I think my zone file is correct:

$TTL 2d

$ORIGIN tst.hcinfotech.ch.

@         IN    SOA     ns1.tst.hcinfotech.ch. info.hcinfotech.ch. (
                        2025091720      ; serial
                        12h             ; refresh
                        15m             ; retry
                        3w              ; expire
                        2h              ; minimum ttl
                        )

;NAME       TTL           CLASS   TYPE    Resource Record
                          IN      NS      ns1.tst.hcinfotech.ch.
                          IN      NS      ns2.tst.hcinfotech.ch.
                          IN      NS      ns3.tst.hcinfotech.ch.

; Name Servers
ns1                       IN      A       10.1.50.32
ns2                       IN      A       10.1.50.33
ns3                       IN      A       10.1.50.34

; Delegation for child zone
a.tst.hcinfotech.ch.      IN      NS      ns4.a.tst.hcinfotech.ch.
a.tst.hcinfotech.ch.      IN      NS      ns5.a.tst.hcinfotech.ch.
a.tst.hcinfotech.ch.      IN      NS      ns6.a.tst.hcinfotech.ch.

; Glue records for in-zone nameservers
ns4.a.tst.hcinfotech.ch.  IN      A       10.1.51.81
ns5.a.tst.hcinfotech.ch.  IN      A       10.1.51.82
ns6.a.tst.hcinfotech.ch.  IN      A       10.1.51.83

But if I check the zone using:

sudo named-checkzone tst.hcinfotech.ch tst.hcinfotech.ch.zone

I am getting the following errors:

zone tst.hcinfotech.ch/IN: new.tst.hcinfotech.ch/NS ‘ns4.new.tst.hcinfotech.ch’ (out of zone) has no addresses records (A or AAAA)
zone tst.hcinfotech.ch/IN: new.tst.hcinfotech.ch/NS ‘ns5.new.tst.hcinfotech.ch’ (out of zone) has no addresses records (A or AAAA)
zone tst.hcinfotech.ch/IN: new.tst.hcinfotech.ch/NS ‘ns6.new.tst.hcinfotech.ch’ (out of zone) has no addresses records (A or AAAA)
zone tst.hcinfotech.ch/IN: loaded serial 2025091715
OK

dig doesn’t provide the information neither:

dig @10.1.50.32 ns4.a.tst.hcinfotech.ch. NS

; <<>> DiG 9.20.0-2ubuntu3.2-Ubuntu <<>> @10.1.50.32 ns4.a.tst.hcinfotech.ch. NS
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32394
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 482336687c4f80730100000068cafe06f69bd4b53e0c48cf (good)
;; QUESTION SECTION:
;ns4.a.tst.hcinfotech.ch.       IN      NS

;; AUTHORITY SECTION:
tst.hcinfotech.ch.      7200    IN      SOA     ns1.tst.hcinfotech.ch. info.hcinfotech.ch. 2025091715 43200 900 1814400 7200

;; Query time: 0 msec
;; SERVER: 10.1.50.32#53(10.1.50.32) (UDP)
;; WHEN: Wed Sep 17 18:29:26 UTC 2025
;; MSG SIZE  rcvd: 125

Has anyone out here ever encountered this issue and can point me in the correct direction?

You may also like