Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 3:47 Doug Barton do...@dougbarton.us napisał(a): First question, why use 2 keys? The combination of a key and an address match list should be enough. Second question, what version of BIND are you using? It probably doesn't matter, but it's good form to include that

Re: Securing zone transfer and DDNS

2011-11-07 Thread Phil Mayers
On 07/11/11 14:31, Aleksander Kurczyk wrote: Maybe this is a stupid question but what is ARM? Google for bind ARM. 1st hit. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list

RE: Securing zone transfer and DDNS

2011-11-07 Thread Davis, Robert
Administrator's Reference Manual. Bob Davis National Agricultural Library robert.dav...@ars.usda.gov 301.504.5859 -Original Message- From: bind-users-bounces+robert.davis1=ars.usda@lists.isc.org [mailto:bind-users-bounces+robert.davis1=ars.usda@lists.isc.org] On Behalf Of Phil

Re: Securing zone transfer and DDNS

2011-11-07 Thread Evan Hunt
Create your keys with the dnssec-keygen utility (check its manual page). Or 'ddns-confgen' is somewhat simpler. Its output is already in the format named.conf wants, and the keys it generates can be repurposed for other uses than DDNS. -- Evan Hunt -- e...@isc.org Internet Systems Consortium,

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 15:59 Jan-Piet Mens jpmens@gmail.com napisał(a): Bind version is: 9.7.4 Upgrade; 9.8.1 is current. (In addition, you're reading a book called BIND 10 -- even though the book doesn't once mention that software!) I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac

Re: Securing zone transfer and DDNS

2011-11-07 Thread Michael Graff
Are you saying you cannot compile from source, or that you must use the vendor supplied version of bind? On Nov 7, 2011, at 10:04, Aleksander Kurczyk aleksanderkurc...@o2.pl wrote: I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4 is the last version that I'm able to use.

Re: Re: Securing zone transfer and DDNS

2011-11-07 Thread Mark Andrews
In message 85ecc83.4a6e4d68.4eb81652.18...@o2.pl, =?UTF-8?Q?Aleksander_Kurczyk?= writ es: Dnia 7 listopada 2011 17:29 Michael Graff mgr...@isc.org napisał(a): Are you saying you cannot compile from source, or that you must use the vendor supplied version of bind? I have tried to compile

Re: several master ip's for a slave zone

2011-11-07 Thread Barry Margolin
In article mailman.5.1320639019.68562.bind-us...@lists.isc.org, Mark Andrews ma...@isc.org wrote: Transfer graph loops prevent expire working as a safeguard against loss of connectivity to the master source. Some people may consider that a feature. Of course, they could also just set the