Hi,

1) Install Bind 9

2) Make secret keys using rndcontrol
        a) grep -i irq /var/run/dmesg.boot
        choose IRQ's that have a lot of interrupts.
        b) Run # rndcontrol -s <IRQ> for each choosen interrupt.
        c) add it to rc.conf to enable after reboot
                rand_irqs="3 7 11".
3) Generate the keys
        a) # rndc-confgen -a -c /usr/local/etc/rndc.key
            # chmod 600 /usr/local/etc/rndc.key
            # chown bind:bind /usr/local/etc/rndc.key
            # vi /usr/local/etc/rndc.key
        b) Copy the key statement
                key "rndc-key" {
                algorithm hmac-md5;
                secret "xxxxxxxxxxxxxxxxxxx";
                };
        c) # cp /usr/local/etc/rndc.conf.sample /usr/local/etc/rndc.conf
             # chmod 600 /usr/local/etc/rndc.conf
            # chown bind:bind /usr/local/etc/rndc.conf
            # vi /usr/local/etc/rndc.conf
        d) Paste the copied key statement here.

4) In rc.conf
        named_enable="YES"
        named_program="/usr/local/sbin/named"
        named_flags="-c /etc/namedb/named.conf -u bind"

5) In /etc/named.conf
        At the top of the file
        // Use the key
        include "/usr/local/etc/rndc.key";

        // Control statement
        controls {
        inet 127.0.0.1 allow { 127.0.0.1; } keys { "rndc-key"; };
        };

6) Check the config
        # named-checkconf /etc/namedb/named.conf

7) Start named
                # /usr/local/sbin/named -c /etc/namedb/named.conf -u bind


Regards SSR



From: Paul Phillips <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Subject: replacing named 8 with 9
Date: Sun, 21 Dec 2003 10:41:55 -0600

If I understand correctly, both freeBSD 4.9 and the 5 series use BIND 8.

I would like to replace this with BIND 9. What is the proper way to do so? Do I need to uninstall BIND 8 in some way before using ports or packages to install BIND 9?

Thanks
PCP

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

_________________________________________________________________
Marriage? http://www.bharatmatrimony.com/cgi-bin/bmclicks1.cgi?74 Join BharatMatrimony.com for free.


_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to