Re: Re: Securing zone transfer and DDNS

2011-11-10 Thread Mark Andrews
In message <4b476ffb.2625d518.4ebbf979.d1...@o2.pl>, =?UTF-8?Q?Aleksander_Kurczy k?= writes: > Thanks everybody for the answers. > I have one more question - how can I block every update for every zone in opti > ons section using update-policy? Updates are blocked by default and will always be bl

Re: Securing zone transfer and DDNS

2011-11-10 Thread Jan-Piet Mens
> I have one more question - how can I block every update for every zone > in options section using update-policy? Are you actually *reading* the documentation: the ARM actually defines `allow-update': "Specifies which hosts are allowed to submit Dynamic DNS updates for master zon

Re: Securing zone transfer and DDNS

2011-11-10 Thread Aleksander Kurczyk
Thanks everybody for the answers. I have one more question - how can I block every update for every zone in options section using update-policy? logging { ... }; options { directory "/var/named"; dnssec-enable yes; recursion yes; allow-recursion { 127.0.0.1; };

Re: Re: Securing zone transfer and DDNS

2011-11-07 Thread Mark Andrews
In message <85ecc83.4a6e4d68.4eb81652.18...@o2.pl>, =?UTF-8?Q?Aleksander_Kurczyk?= writ es: > Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? > I have tried to compile version 9

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? I have tried to compile version 9.8.1 but make exited with some errors. I have compiled version 9.7.4. The version of BIND supplied w

Re: Securing zone transfer and DDNS

2011-11-07 Thread Michael Graff
Are you saying you cannot compile from source, or that you must use the vendor supplied version of bind? On Nov 7, 2011, at 10:04, Aleksander Kurczyk wrote: > I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4 is the > last version that I'm able to use. _

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 15:59 Jan-Piet Mens napisał(a): > > Bind version is: 9.7.4 > > Upgrade; 9.8.1 is current. (In addition, you're reading a book called > BIND 10 -- even though the book doesn't once mention that software!) I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4

Re: Securing zone transfer and DDNS

2011-11-07 Thread Evan Hunt
> Create your keys with the dnssec-keygen utility (check its manual page). Or 'ddns-confgen' is somewhat simpler. Its output is already in the format named.conf wants, and the keys it generates can be repurposed for other uses than DDNS. -- Evan Hunt -- e...@isc.org Internet Systems Consortium,

Re: Securing zone transfer and DDNS

2011-11-07 Thread Jan-Piet Mens
> Bind version is: 9.7.4 Upgrade; 9.8.1 is current. (In addition, you're reading a book called BIND 10 -- even though the book doesn't once mention that software!) > Maybe this is a stupid question but what is ARM? BIND 9 Administrator Reference Manual. It is provided in multiple formats within

RE: Securing zone transfer and DDNS

2011-11-07 Thread Davis, Robert
Phil Mayers Sent: Monday, November 07, 2011 9:47 AM To: bind-users@lists.isc.org Subject: Re: Securing zone transfer and DDNS On 07/11/11 14:31, Aleksander Kurczyk wrote: > Maybe this is a stupid question but what is ARM? Google for "bind

Re: Securing zone transfer and DDNS

2011-11-07 Thread Phil Mayers
On 07/11/11 14:31, Aleksander Kurczyk wrote: Maybe this is a stupid question but what is ARM? Google for "bind ARM". 1st hit. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list b

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 3:47 Doug Barton napisał(a): > First question, why use 2 keys? The combination of a key and an address > match list should be enough. Second question, what version of BIND are > you using? It probably doesn't matter, but it's good form to include > that information. Because

Re: Securing zone transfer and DDNS

2011-11-06 Thread Doug Barton
On 11/06/2011 17:07, Aleksander Kurczyk wrote: > Hello, I just reading a book called "Pro DNS and BIND 10" written by > Ron Aitchrison. I'm stuck in chapter 10 called "DNS Secure > Configurations". There's described how to secure zone transfer and > dynamic updates. The author has used one key to s

Securing zone transfer and DDNS

2011-11-06 Thread Aleksander Kurczyk
Hello, I just reading a book called "Pro DNS and BIND 10" written by Ron Aitchrison. I'm stuck in chapter 10 called "DNS Secure Configurations". There's described how to secure zone transfer and dynamic updates. The author has used one key to secure both the zone transfer and the dynamic updates