Re: Re: Securing zone transfer and DDNS

2011-11-10 Thread Mark Andrews
In message <4b476ffb.2625d518.4ebbf979.d1...@o2.pl>, =?UTF-8?Q?Aleksander_Kurczy k?= writes: > Thanks everybody for the answers. > I have one more question - how can I block every update for every zone in opti > ons section using update-policy? Updates are blocked by default and will always be bl

Re: Securing zone transfer and DDNS

2011-11-10 Thread Jan-Piet Mens
> I have one more question - how can I block every update for every zone > in options section using update-policy? Are you actually *reading* the documentation: the ARM actually defines `allow-update': "Specifies which hosts are allowed to submit Dynamic DNS updates for master zon

Re: Securing zone transfer and DDNS

2011-11-10 Thread Aleksander Kurczyk
Thanks everybody for the answers. I have one more question - how can I block every update for every zone in options section using update-policy? logging { ... }; options { directory "/var/named"; dnssec-enable yes; recursion yes; allow-recursion { 127.0.0.1; };

Re: Re: Securing zone transfer and DDNS

2011-11-07 Thread Mark Andrews
In message <85ecc83.4a6e4d68.4eb81652.18...@o2.pl>, =?UTF-8?Q?Aleksander_Kurczyk?= writ es: > Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? > I have tried to compile version 9

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? I have tried to compile version 9.8.1 but make exited with some errors. I have compiled version 9.7.4. The version of BIND supplied w

Re: Securing zone transfer and DDNS

2011-11-07 Thread Michael Graff
Are you saying you cannot compile from source, or that you must use the vendor supplied version of bind? On Nov 7, 2011, at 10:04, Aleksander Kurczyk wrote: > I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4 is the > last version that I'm able to use. _

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 15:59 Jan-Piet Mens napisał(a): > > Bind version is: 9.7.4 > > Upgrade; 9.8.1 is current. (In addition, you're reading a book called > BIND 10 -- even though the book doesn't once mention that software!) I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4

Re: Securing zone transfer and DDNS

2011-11-07 Thread Evan Hunt
> Create your keys with the dnssec-keygen utility (check its manual page). Or 'ddns-confgen' is somewhat simpler. Its output is already in the format named.conf wants, and the keys it generates can be repurposed for other uses than DDNS. -- Evan Hunt -- e...@isc.org Internet Systems Consortium,

Re: Securing zone transfer and DDNS

2011-11-07 Thread Jan-Piet Mens
> Bind version is: 9.7.4 Upgrade; 9.8.1 is current. (In addition, you're reading a book called BIND 10 -- even though the book doesn't once mention that software!) > Maybe this is a stupid question but what is ARM? BIND 9 Administrator Reference Manual. It is provided in multiple formats within

RE: Securing zone transfer and DDNS

2011-11-07 Thread Davis, Robert
Phil Mayers Sent: Monday, November 07, 2011 9:47 AM To: bind-users@lists.isc.org Subject: Re: Securing zone transfer and DDNS On 07/11/11 14:31, Aleksander Kurczyk wrote: > Maybe this is a stupid question but what is ARM? Google for "bind

Re: Securing zone transfer and DDNS

2011-11-07 Thread Phil Mayers
On 07/11/11 14:31, Aleksander Kurczyk wrote: Maybe this is a stupid question but what is ARM? Google for "bind ARM". 1st hit. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list b

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 3:47 Doug Barton napisał(a): > First question, why use 2 keys? The combination of a key and an address > match list should be enough. Second question, what version of BIND are > you using? It probably doesn't matter, but it's good form to include > that information. Because

Re: Securing zone transfer and DDNS

2011-11-06 Thread Doug Barton
On 11/06/2011 17:07, Aleksander Kurczyk wrote: > Hello, I just reading a book called "Pro DNS and BIND 10" written by > Ron Aitchrison. I'm stuck in chapter 10 called "DNS Secure > Configurations". There's described how to secure zone transfer and > dynamic updates. The author has used one key to s