Re: False positive on inscure zone update by IP?

2016-11-28 Thread Mark Andrews
In message <20161128195746.ga11...@weiser.dinsnail.net>, Michael Weiser writes: > Hi Kevin, > > On Mon, Nov 28, 2016 at 05:39:16PM +, Darcy Kevin (FCA) wrote: > > > why > > specify "allow-update { none; };" when that's the default? > [...] > > If you're doing that only for documentation

Re: False positive on inscure zone update by IP?

2016-11-28 Thread Michael Weiser
Hi Kevin, On Mon, Nov 28, 2016 at 05:39:16PM +, Darcy Kevin (FCA) wrote: > why > specify "allow-update { none; };" when that's the default? [...] > If you're doing that only for documentation purposes, you could use a > comment instead. Thanks Kevin! It never occured to me to just try

RE: False positive on inscure zone update by IP?

2016-11-28 Thread Darcy Kevin (FCA)
Well, I suppose it's a little silly that the informational message would count "none" as an "IP address", but on the other hand, why specify "allow-update { none; };" when that's the default? It probably never occurred to the creator/author of the informational message that someone would

Re: False positive on inscure zone update by IP?

2016-11-28 Thread Michael Weiser
Hi, On Fri, Nov 18, 2016 at 06:32:26PM +0100, Michael Weiser wrote: > zone 'localhost' allows updates by IP address, which is insecure [...] > So I wonder: Can I ignore these messages? No idea, anyone? Should I take this to the devel list? -- Thanks, Michael