Hi,

TSIG key to sign NOTIFY seems be missing in your BIND9 configuration.
( it should be
   also-notify { Z.Z.Z.Z key upd_key; };
 etc.)

NSD's allow-notify ACL with a TSIG key requests
 - source IP address matches, and
 - good TSIG signature by the key
for incoming NOTIFY messages.


> My authoritative server has the following configuration:
> -----------------------------------------------------------------------------
> options {
>  ...
>  also-notify      {Z.Z.Z.Z;};
> -----------------------------------------------------------------------------
_______________________________________________
nsd-users mailing list
nsd-users@lists.nlnetlabs.nl
https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users

Reply via email to