Re: DDNS - limitation and excluding updates from certain networks

2017-12-27 Thread Reindl Harald
Am 27.12.2017 um 21:31 schrieb MAYER Hans: Many thanks. Yes, that’s exactly what I am looking for. I have "ddns-update-style interim;” But what do you mean with "static entry” ? For example my "static entries” are all servers. But the server don’t have any DHCP entries. The IP addresses of

Re: DDNS - limitation and excluding updates from certain networks

2017-12-27 Thread MAYER Hans
Hello Dirk, Many thanks. Yes, that’s exactly what I am looking for. I have "ddns-update-style interim;” But what do you mean with "static entry” ? For example my "static entries” are all servers. But the server don’t have any DHCP entries. The IP addresses of the interfaces are “hard

Re: DDNS - limitation and excluding updates from certain networks

2017-12-26 Thread Dirk Gottschalk via bind-users
Hello Hans, Am Mittwoch, den 20.12.2017, 12:39 + schrieb MAYER Hans: > > Dear All, > > My environment: We are using the latest version of BIND and DHCP from > ISC. Our workstations ( mostly Windows and some Mac ) are in certain > networks. Only these networks are allowed to do dynamic DNS

Re: DDNS - limitation and excluding updates from certain networks

2017-12-25 Thread MAYER Hans
Hi Grant, Many thanks for the detailed information. "update-policy” is new for me and maybe the solution. I have to dig deeper into the documentation. > update-policy { grant *.fx.movie.edu. self fx.movie.edu. A; }; What does it say ? So far I have seen the client is only

Re: DDNS - limitation and excluding updates from certain networks

2017-12-25 Thread MAYER Hans
ans >> Sent: Wednesday, December 20, 2017 2:27 PM >> To: bind-us...@isc.org >> Subject: Re: DDNS - limitation and excluding updates from certain networks >> >> >> Dear Mukund, >> >> Many thanks for coming back. >> >>> You'll have to explain wh

RE: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Philippe.Simonet
> -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of > MAYER Hans > Sent: Wednesday, December 20, 2017 2:27 PM > To: bind-us...@isc.org > Subject: Re: DDNS - limitation and excluding updates from certain networks > > > De

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Mukund Sivaraman
On Wed, Dec 20, 2017 at 10:40:31AM -0700, Grant Taylor via bind-users wrote: > On 12/20/2017 06:27 AM, MAYER Hans wrote: > > And I don’t wont that this static names can by changed by someone out of > > an IP range, where it is allowed. I didn’t find any hint to block > > certain IP ranges to be

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Grant Taylor via bind-users
On 12/20/2017 10:40 AM, Grant Taylor via bind-users wrote: I don't remember the specifics, but there is a way built into BIND to do what you are wanting. Well, my GoogleFu seems to working today: Link - DNS Dynamic Update (DNS and BIND, 4th Edition) -

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Grant Taylor via bind-users
On 12/20/2017 06:27 AM, MAYER Hans wrote: And I don’t wont that this static names can by changed by someone out of an IP range, where it is allowed. I didn’t find any hint to block certain IP ranges to be updated within a dynamic zone. I don't remember the specifics, but there is a way built

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Bob Harold
On Wed, Dec 20, 2017 at 8:54 AM, Mukund Sivaraman wrote: > On Wed, Dec 20, 2017 at 01:27:17PM +, MAYER Hans wrote: > > > > Dear Mukund, > > > > Many thanks for coming back. > > > > > You'll have to explain what you mean better for a more specific answer, > > > but see the

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Mukund Sivaraman
On Wed, Dec 20, 2017 at 01:27:17PM +, MAYER Hans wrote: > > Dear Mukund, > > Many thanks for coming back. > > > You'll have to explain what you mean better for a more specific answer, > > but see the manual for the "allow-update" ACL config option > > In my zone configuration I have an

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread MAYER Hans
Dear Mukund, Many thanks for coming back. > You'll have to explain what you mean better for a more specific answer, > but see the manual for the "allow-update" ACL config option In my zone configuration I have an “allow-update” statement. Here I define all networks which are allowed to

Re: DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread Mukund Sivaraman
On Wed, Dec 20, 2017 at 12:39:33PM +, MAYER Hans wrote: > > > Dear All, > > My environment: We are using the latest version of BIND and DHCP from ISC. > Our workstations ( mostly Windows and some Mac ) are in certain networks. > Only these networks are allowed to do dynamic DNS updates.

DDNS - limitation and excluding updates from certain networks

2017-12-20 Thread MAYER Hans
Dear All, My environment: We are using the latest version of BIND and DHCP from ISC. Our workstations ( mostly Windows and some Mac ) are in certain networks. Only these networks are allowed to do dynamic DNS updates. So when a PC is switched on its IPv4, IPv4 reverse, IPv6 and reverse is