Re: More On Split Horizon & Slaves

2015-08-22 Thread Tim Daneliuk
On 08/22/2015 10:42 AM, /dev/rob0 wrote: > On Sat, Aug 22, 2015 at 09:53:31AM -0500, Tim Daneliuk wrote: > [ Two views, one zone name, different zone contents, > same master & slave: how to populate both views on the slave? ] > >> My sense is that I need to split the internal and external host

Re: Bind v9.9.7-P2 inline-signing hourly?

2015-08-22 Thread Jim Popovitch
On Sat, Aug 22, 2015 at 12:49 PM, Evan Hunt wrote: >> Is the zone being signed every hour, or is it just a check? FWIW, >> the .signed and .jnl are not being modified every hour, so I suspect >> that log entry is just a periodic check.. but I'm not sure. > > It's a check to see if the zone keys

Re: Bind v9.9.7-P2 inline-signing hourly?

2015-08-22 Thread Evan Hunt
> Is the zone being signed every hour, or is it just a check? FWIW, > the .signed and .jnl are not being modified every hour, so I suspect > that log entry is just a periodic check.. but I'm not sure. It's a check to see if the zone keys have been changed (e.g., a new key added, an existing key

Re: More On Split Horizon & Slaves

2015-08-22 Thread /dev/rob0
On Sat, Aug 22, 2015 at 09:53:31AM -0500, Tim Daneliuk wrote: [ Two views, one zone name, different zone contents, same master & slave: how to populate both views on the slave? ] > My sense is that I need to split the internal and external host > assignments on the master differently, so that t

More On Split Horizon & Slaves

2015-08-22 Thread Tim Daneliuk
I am still working through how to get this working but a little further steering would be helpful. I have a situation with a single domain "foo.com" That has both public facing and NATed internal addresses. That is, regardless of whether the host IP is visible in the outside world or not, its c

Bind v9.9.7-P2 inline-signing hourly?

2015-08-22 Thread Jim Popovitch
Hello! Recently upgraded a master server to bind-9.9.7-P2, in order to take advantage of automated inline signing as detailed here: https://kb.isc.org/article/AA-00626/0/Inline-Signing-in-ISC-BIND-9.9.0-Examples.html One thing I've noticing is that it appears that the zones are resigned or check