dnssec update

Hi, I configure bind to serve "example.com" domain with 1. dnssec-enable yes; 2. auto-dnssec maintain; 3. inline-signing yes; 4. allow-update{localhost;}; Bind can fully automatic dnssec signing on example.com but If I want to modify a record in example.com zone

Re: dnssec update

> I configure bind to serve "example.com" domain with > > 1. dnssec-enable yes; > 2. auto-dnssec maintain; > 3. inline-signing yes; > 4. allow-update{localhost;}; > > Bind can fully automatic dnssec signing on example.com but If I want to > modify a record in example.co

Re: dnssec update

Graham Clinch wrote: > > However, the 'allow-update' stanza makes me wonder whether you're mixing > dynamic updates with manual zonefile changes - I'm not sure whether > inline-signing can support a mixture of dynamic and manual > modifications. It is generally true (with DNSSEC or without) that