Packet for 'mydomain.com' denied: Signature with TSIG key 'dhcpupdate' does not match the expected algorithm (hmac-sha256 / hmac-md5.sig-alg.reg.int)
It appears from very light research (old-fashioned word for 'googling') that opensense/pfsense used to support HMAC-MD5 only [1], and the above message indicates so to me. Try generating an HMAC-MD5 key on for your PowerDNS server and try again with that? Alternatively, can you hover over the tooltip in the UI you've shown and determine whether different algorithms are supported? The screenshot doesn't suggest they are. -JP [1] https://github.com/opnsense/plugins/pull/2203/files _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com https://mailman.powerdns.com/mailman/listinfo/pdns-users