Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 3:47 Doug Barton napisał(a): > First question, why use 2 keys? The combination of a key and an address > match list should be enough. Second question, what version of BIND are > you using? It probably doesn't matter, but it's good form to include > that information. Because

Re: Securing zone transfer and DDNS

2011-11-07 Thread Phil Mayers
On 07/11/11 14:31, Aleksander Kurczyk wrote: Maybe this is a stupid question but what is ARM? Google for "bind ARM". 1st hit. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list b

RE: Securing zone transfer and DDNS

2011-11-07 Thread Davis, Robert
Administrator's Reference Manual. Bob Davis National Agricultural Library robert.dav...@ars.usda.gov 301.504.5859 -Original Message- From: bind-users-bounces+robert.davis1=ars.usda@lists.isc.org [mailto:bind-users-bounces+robert.davis1=ars.usda@lists.isc.org] On Behalf Of Phil May

Re: Securing zone transfer and DDNS

2011-11-07 Thread Jan-Piet Mens
> Bind version is: 9.7.4 Upgrade; 9.8.1 is current. (In addition, you're reading a book called BIND 10 -- even though the book doesn't once mention that software!) > Maybe this is a stupid question but what is ARM? BIND 9 Administrator Reference Manual. It is provided in multiple formats within

Re: Securing zone transfer and DDNS

2011-11-07 Thread Evan Hunt
> Create your keys with the dnssec-keygen utility (check its manual page). Or 'ddns-confgen' is somewhat simpler. Its output is already in the format named.conf wants, and the keys it generates can be repurposed for other uses than DDNS. -- Evan Hunt -- e...@isc.org Internet Systems Consortium,

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 15:59 Jan-Piet Mens napisał(a): > > Bind version is: 9.7.4 > > Upgrade; 9.8.1 is current. (In addition, you're reading a book called > BIND 10 -- even though the book doesn't once mention that software!) I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4

Re: Securing zone transfer and DDNS

2011-11-07 Thread Michael Graff
Are you saying you cannot compile from source, or that you must use the vendor supplied version of bind? On Nov 7, 2011, at 10:04, Aleksander Kurczyk wrote: > I'm using Mac OS X 10.4.11 Tiger on G4 400 MHz PPC Mac and BIND 9.7.4 is the > last version that I'm able to use. _

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? I have tried to compile version 9.8.1 but make exited with some errors. I have compiled version 9.7.4. The version of BIND supplied w

Re: Re: Securing zone transfer and DDNS

2011-11-07 Thread Mark Andrews
In message <85ecc83.4a6e4d68.4eb81652.18...@o2.pl>, =?UTF-8?Q?Aleksander_Kurczyk?= writ es: > Dnia 7 listopada 2011 17:29 Michael Graff napisał(a): > > Are you saying you cannot compile from source, or that you must use the > vendor supplied version of bind? > I have tried to compile version 9

Re: several master ip's for a slave zone

2011-11-07 Thread Barry Margolin
In article , Mark Andrews wrote: > Transfer graph loops prevent expire working as a safeguard against > loss of connectivity to the master source. Some people may consider that a feature. Of course, they could also just set the expire time really high. -- Barry Margolin Arlington, MA __