Re: DNSSEC with views and shared zone files

2024-10-22 Thread Bowie Bailey via bind-users
On 10/21/2024 9:35 AM, Bowie Bailey via bind-users wrote: On 10/18/2024 6:19 PM, Nick Tait via bind-users wrote: On 19/10/2024 05:50, Bowie Bailey via bind-users wrote: On 10/18/2024 12:07 PM, Bob Harold wrote: On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users wrote: The seco

Re: DNSSEC with views and shared zone files

2024-10-21 Thread Bowie Bailey via bind-users
On 10/18/2024 6:19 PM, Nick Tait via bind-users wrote: On 19/10/2024 05:50, Bowie Bailey via bind-users wrote: On 10/18/2024 12:07 PM, Bob Harold wrote: On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users wrote: The first issue is that my server uses a few views to give dif

Re: DNSSEC with views and shared zone files

2024-10-19 Thread Michael Richardson
Bowie Bailey via bind-users wrote: > The first issue is that my server uses a few views to give different IPs > based on which network the request comes from.  I found that if I point the > zones in the different views to the same key directory, there are no errors > and all vie

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Ondřej Surý
You can’t do this. The signatures are unique per zone and thus the files need to be unique as well. Just write a small provisioning on your side that duplicates the files. Ondrej -- Ondřej Surý — ISC (He/Him) My working hours and your working hours may be different. Please do not feel obligate

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Nick Tait via bind-users
On 19/10/2024 05:50, Bowie Bailey via bind-users wrote: On 10/18/2024 12:07 PM, Bob Harold wrote: On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users wrote: I am finally getting around to setting up DNSSEC on my server (Bind 9.16).  I found some instructions online and was ab

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Sten Carlsen
I am running this setup, it works. My 2 zones are internal and external, so testing from outside can only show one side. Thanks Sten > On 18 Oct 2024, at 18.07, Bob Harold wrote: > > > On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users > mailto:bind-users@lists.isc.org>> wrote: >

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Sten Carlsen
-- Best regards Sten Carlsen A pessimist is a person that can find a problem for every solution. > On 18 Oct 2024, at 18.50, Bowie Bailey via bind-users > wrote: > > On 10/18/2024 12:07 PM, Bob Harold wrote: >> >> On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users >> mailto:bi

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Bowie Bailey via bind-users
On 10/18/2024 12:07 PM, Bob Harold wrote: On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users wrote: I am finally getting around to setting up DNSSEC on my server (Bind 9.16).  I found some instructions online and was able to set up one of my zones and confirm that t

Re: DNSSEC with views and shared zone files

2024-10-18 Thread Bob Harold
On Fri, Oct 18, 2024 at 11:33 AM Bowie Bailey via bind-users < bind-users@lists.isc.org> wrote: > I am finally getting around to setting up DNSSEC on my server (Bind > 9.16). I found some instructions online and was able to set up one of > my zones and confirm that the keys are being returned. H