Re: Batch updating all DNS records on my Bind server

2020-04-20 Thread LuKreme
On Apr 20, 2020, at 18:11, Mark Andrews wrote: > > Really all machines should be updating their own address records in the > DNS. Have each machine create a KEY record with its name. Install the > KEY record in the DNS. Use SIG(0) signed UPDATE requests to update the > address records. This

Re: Batch updating all DNS records on my Bind server

2020-04-20 Thread Mark Andrews
Really all machines should be updating their own address records in the DNS. Have each machine create a KEY record with its name. Install the KEY record in the DNS. Use SIG(0) signed UPDATE requests to update the address records. update-policy { grant * self . A KEY; // Allow the

Re: Batch updating all DNS records on my Bind server

2020-04-20 Thread Chuck Aurora
On 2020-04-20 10:33, Warren Kumari wrote: On Sat, Apr 18, 2020 at 12:52 PM Tony Finch wrote: @lbutlr wrote: > > Is it possible to batch update all the domains? Looking at nsupdate it > looks like I have to step through and do every domain individually. An UPDATE request can change many

Re: Batch updating all DNS records on my Bind server

2020-04-20 Thread Warren Kumari
On Sat, Apr 18, 2020 at 12:52 PM Tony Finch wrote: > > @lbutlr wrote: > > > > Is it possible to batch update all the domains? Looking at nsupdate it > > looks like I have to step through and do every domain individually. > > An UPDATE request can change many records, so long as they are all in

Re: Batch updating all DNS records on my Bind server

2020-04-18 Thread Tony Finch
@lbutlr wrote: > > Is it possible to batch update all the domains? Looking at nsupdate it > looks like I have to step through and do every domain individually. An UPDATE request can change many records, so long as they are all in the same zone, and so long as they fit in the 64KB limit of DNS

Re: Batch updating all DNS records on my Bind server

2020-04-18 Thread Reindl Harald
Am 18.04.20 um 17:39 schrieb @lbutlr: > On 18 Apr 2020, at 09:34, Reindl Harald wrote: >> Am 18.04.20 um 17:23 schrieb @lbutlr: >>> Is it possible to batch update all the domains? Looking at nsupdate it >>> looks like I have to step through and do every domain individually. > >> well, where

Re: Batch updating all DNS records on my Bind server

2020-04-18 Thread @lbutlr
On 18 Apr 2020, at 09:34, Reindl Harald wrote: > Am 18.04.20 um 17:23 schrieb @lbutlr: >> Is it possible to batch update all the domains? Looking at nsupdate it looks >> like I have to step through and do every domain individually. > well, where is the issue iterate all your domains in a bash

Re: Batch updating all DNS records on my Bind server

2020-04-18 Thread Reindl Harald
Am 18.04.20 um 17:23 schrieb @lbutlr: > We are making some changes to our NSP account and the NSP is threatening to > change our IP block. This means I will have to update all the domains on the > system (all using DNSSEC). We are still arguing with them since there is no > technical reason