Hello,
I try to set up a testing environment in order to create some scripts for
automated the roll over KSK.
# question 1 #
this is my policy :
dnssec-policy "test" {
keys {
ksk lifetime P3D algorithm ecdsa256 2048;
zsk lifetime P1D algorithm ecdsa256
Adding my 2p, I would take that principle a step further.
Create a generic, unique SRV record that represents what you want to
happen. Then create specific CNAME records for each server. The reasons for
the extra, generic record are that it represents the service you want to
offer and all "server..
On 14 May 2024, at 15:20, DEMBLANS Mathieu wrote:
A part of the subdomains are managed by us, others subdomains by an
other entity.
So we can't configure a generic target for all subdomains as each
entity has its own target for SRV entries.
-Message d'origine-
De : bind-users bind-us
On 15. 05. 24 17:21, Peter Carlson wrote:
As I understand it bind_dlz does not support multiple views, I have to
following scenario and am trying to figure out how to configure it:
* Internal (192.168.10.0/24)
o resolve internal domain xyz.com
o resolve internal samba domain xyz.l
4 matches
Mail list logo
