Bind v9.9.7-P2 inline-signing hourly?

2015-08-22 Thread Jim Popovitch
Hello! Recently upgraded a master server to bind-9.9.7-P2, in order to take advantage of automated inline signing as detailed here: https://kb.isc.org/article/AA-00626/0/Inline-Signing-in-ISC-BIND-9.9.0-Examples.html One thing I've noticing is that it appears that the zones are resigned or

More On Split Horizon Slaves

2015-08-22 Thread Tim Daneliuk
I am still working through how to get this working but a little further steering would be helpful. I have a situation with a single domain foo.com That has both public facing and NATed internal addresses. That is, regardless of whether the host IP is visible in the outside world or not, its

Re: More On Split Horizon Slaves

2015-08-22 Thread /dev/rob0
On Sat, Aug 22, 2015 at 09:53:31AM -0500, Tim Daneliuk wrote: [ Two views, one zone name, different zone contents, same master slave: how to populate both views on the slave? ] My sense is that I need to split the internal and external host assignments on the master differently, so that the

Re: Bind v9.9.7-P2 inline-signing hourly?

2015-08-22 Thread Jim Popovitch
On Sat, Aug 22, 2015 at 12:49 PM, Evan Hunt e...@isc.org wrote: Is the zone being signed every hour, or is it just a check? FWIW, the .signed and .jnl are not being modified every hour, so I suspect that log entry is just a periodic check.. but I'm not sure. It's a check to see if the zone