On 31 jan 2014, at 13:33, Gavin Brown <[email protected]> wrote:
> I recently built a BIND config very similar to this. Rather than using
> match-clients in each view, I gave each view its own IP address and used
> match-destinations.
>
> This means you can query the signed and unsigned views remotely, which
> is handy for debugging and monitoring.
Yes, that is a much nicer solution. You can also select view based on the TSIG
used in the DNS query, a solution that could confuse even the most experienced
DNS administrator :-)
jakob
--
Jakob Schlyter
Kirei AB - www.kirei.se
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
