Hi,
>
> TSIG key to sign NOTIFY seems be missing in your BIND9 configuration.
> ( it should be
> also-notify { Z.Z.Z.Z key upd_key; };
> etc.)
>
> NSD's allow-notify ACL with a TSIG key requests
> - source IP address matches, and
> - good TSIG signature by the key
> for incoming NOTIFY messages.
>
>
> > My authoritative server has the following configuration:
> >
> -----------------------------------------------------------------------------
> > options {
> > ...
> > also-notify {Z.Z.Z.Z;};
> >
> -----------------------------------------------------------------------------
>
> Dear Daisuke,
>
> thanks for answer
>
> Great, I updated my /etc/bind/named.conf adding "key upd_key" to my
> "also-notify" option and now everything seems to work fine.
>
> Now I can proceed with my tests :)
>
> Best Regards
_______________________________________________
nsd-users mailing list
nsd-users@lists.nlnetlabs.nl
https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users
