Thank you Sir!
On Mon, Aug 13, 2012 at 8:08 PM, Mark Andrews <ma...@isc.org> wrote:
>
> In message
> <cahu+3ox-tnyuqguxtzcdtbpf14jihxa6ddtrel26lmfsit2...@mail.gmail.com>
> , Red Cricket writes:
>> Hi,
>>
>> I am running bind 9.9.1-P1 and I have in my named.conf this zone ...
>>
>> zone "example.com" {
>> ...
>> allow-update {
>> 192.168.1.32;
>> 192.168.1.33;
>> key example.com.key;
>> };
>> };
>
> allow-update { !{ !192.168.1.32; !192.168.1.33; any; }; key example.com.key;
> };
>
>> I was hoping that this meant that only hosts 192.168.1.32 and
>> 192.168.1.33 with the key example.com.key
>> could update example.com, but after doing some test it appears that I
>> can update example.com from
>> 192.168.1.32 and 192.168.1.33 without the key and that any host that
>> uses the key can update example.com.
>>
>> What sort of config do I need to use to restrict updates to
>> 192.168.1.32 or 192.168.1.33 AND the key?
>>
>> Thanks
>> Red
>> _______________________________________________
>> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>> from this list
>>
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
