Greg Rivers <gcr+bind-us...@tharned.org> wrote: > As Rick Dicaire said previously, "Notifications themselves don't use TSIG".
Depends on your configuration :-) 28-May-2019 01:43:13.162 notify: info: client @0x5591b0877080 2001:630:212:8::d:aa#31085/key tsig-ipreg: view main: received notify for zone 'cam.ac.uk': TSIG 'tsig-ipreg' I use explicit notifies between my servers, with zones on the hidden primary configured like also-notify { notify-auth; }; and on the other servers like masters master-ipreg { 2001:630:212:8::d:aa key tsig-ipreg; }; and a shared global config clause like masters notify-auth { 2001:630:212:8::d:a0 key tsig-ipreg; # etc. }; Not quite TSIG all the things because many of the secondary zones we serve are not quite so keyed up. Tony. -- f.anthony.n.finch <d...@dotat.at> http://dotat.at/ Great Orme Head to the Mull of Galloway: Northwest 4 or 5, occasionally 6 at first, becoming variable 3 or less, then southeast 5 or 6 later. Slight or moderate, becoming smooth or slight for a time. Showers at first, occasional rain later. Good. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users