In message <20100528211806.gx4...@tamay-dogan.net>, Michelle Konzack writes: > Hello DNSSEC Experts, > > I am ongoing to install 4 new Name Servers and increse my registrar and > hosting service... =20 > > OK, I have tried to make my own 4 domains with 16 zones signed and it > took me one hour of my life! > > Since I have to re-sign the zones if something change it will give me > headaches up to the end of my life, so my queston is: > > Is there a command line tool (or a daemon) which > check for changes and re-sign the zone automated? > > I can not believe, that you are signing each zone by hand! :-D > > Can an expert please check 'dig ANY tamay-dogan.net' whether this is > right? > > Also I am not realy sure whether I need "dnssec-validation yes" in my > "options". > > Thanks, Greetings and nice Day/Evening > Michelle Konzack > > --=20 > ##################### Debian GNU/Linux Consultant ###################### > Development of Intranet and Embedded Systems with Debian GNU/Linux > > itsyst...@tdnet France EURL itsyst...@tdnet UG (limited liability) > Owner Michelle Konzack Owner Michelle Konzack > > Apt. 917 (homeoffice) > 50, rue de Soultz Kinzigstra=DFe 17 > 67100 Strasbourg/France 77694 Kehl/Germany > Tel: +33-6-61925193 mobil Tel: +49-177-9351947 mobil > Tel: +33-9-52705884 fix > > <http://www.itsystems.tamay-dogan.net/> <http://www.flexray4linux.org/> > <http://www.debian.tamay-dogan.net/> <http://www.can4linux.org/> > > Jabber linux4miche...@jabber.ccc.de > ICQ #328449886 > > Linux-User #280138 with the Linux Counter, http://counter.li.org/ You can just let named re-sign the zone for you. Treat the zones as dynamic and named from BIND 9.6 onwards will maintain the signatures for you.
Use nsupdate to change the contents of the zone. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
