Graham Clinch <g.cli...@lancaster.ac.uk> wrote: > > However, the 'allow-update' stanza makes me wonder whether you're mixing > dynamic updates with manual zonefile changes - I'm not sure whether > inline-signing can support a mixture of dynamic and manual > modifications.
It is generally true (with DNSSEC or without) that you can't mix dynamic updates and direct zone file editing. If you can't use nsupdate for whatever reason, you need to use rndc freeze before you edit the file and rndc thaw afterwards. (Thanks for plugging nsdiff for me!) Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ West Southeast Iceland: Westerly backing southerly, 6 to gale 8. Very rough or high. Wintry showers. Good, occasionally poor. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users