DNS-SERIAL-MISMATCH
SOA serial differs between nameservers
What it means
Secondaries copy the zone from the primary using the SOA serial to detect changes. Different serials mean at least one server is serving stale data, so some users see old records.
How to fix it
- 1Check zone transfers (AXFR/IXFR) and NOTIFY from the primary to each secondary.
- 2Confirm firewall rules allow TCP 53 between the servers.
- 3Increment the serial when editing the zone by hand.
Re-check after the change
DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.
