Re: Restricting access & keeping identical data across views

2012-03-28 Thread Tony Finch
Jon A. wrote: > Is there a better practice to serve 100% the same authoritative data > in two views, but block recursion, cache use, and out of zone data? Don't use views, use allow-query and allow-recursion ACLs. Tony. -- f.anthony.n.finchhttp://dotat.at/ Plymouth, Biscay, FitzRoy: Northe

Re: Restricting access & keeping identical data across views

2012-03-28 Thread Niall O'Reilly
On 28 Mar 2012, at 13:01, Lightner, Jeff wrote: > Is signing not done at zone file level? Yes, but that's not the problem. > For our views even when the zones are identical I keep separate copies for the > internaland external views so I would have thought this wouldn't be an issue.

Re: Restricting access & keeping identical data across views

2012-03-28 Thread Eliezer Croitoru
if the recrustion is the only thing we can might use a inclue file to include all the zones in specific direcotry. so you manage one server but more views... On 28/03/2012 11:38, Niall O'Reilly wrote: On 28 Mar 2012, at 02:16, Jon A. wrote: I'm looking for a best practice to keep zone data a

RE: Restricting access & keeping identical data across views

2012-03-28 Thread Lightner, Jeff
c.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Niall O'Reilly Sent: Wednesday, March 28, 2012 5:38 AM To: Jon A. Cc: bind-users@lists.isc.org Subject: Re: Restricting access & keeping identical data across views On 28 Mar 2012, at 02:16, Jon A. wrote: >

Re: Restricting access & keeping identical data across views

2012-03-28 Thread Niall O'Reilly
On 28 Mar 2012, at 02:16, Jon A. wrote: > I'm looking for a best practice to keep zone data across multiple views on > multiple servers sync FWIW, you're not alone. I have three views too, internal, external, and mendacious. The last is for coercing unregistered clien