Securing zone transfer and DDNS

2011-11-06 Thread Aleksander Kurczyk
; }; }; zone "my.zone" in { type master; file "my.zone"; allow-transfer { key "key"; }; allow-update { key "key"; }; }; Thanks in advance. -- Pozdrawiam, Aleksander Kurczyk ___ Please visit https://lists.isc.org

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
low-update { key "key"; }; }; > > I don't see anything in the ARM about including key directives in the > allow-update or allow-transfer grammar. Without that (keys only in server section) I can transfer whole domain (dig my.zone axfr) without passing any

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
On the book it's both in the master and slave (zone tranasfer) named.conf files. > Instead of allow-update, I'd like to suggest you read up on the `grant' > statement which allows a much finer granularity on DDNS. I have trying: update-policy { grant key subdomain my.zone

Re: Securing zone transfer and DDNS

2011-11-07 Thread Aleksander Kurczyk
pplied with this version of OS X (10.4.11) is 9.4.x. I'm using Xcode tools 2.5 (gcc 3.3 and 4.0) supplied with Tiger. -- Pozdrawiam, Aleksander Kurczyk ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this

Re: Securing zone transfer and DDNS

2011-11-10 Thread Aleksander Kurczyk
type master; file "named.local"; }; zone "my.zone" IN { type master; file "my.zone"; allow-transfer { key transfer-key; }; update-policy { grant ddns-key zonesub ANY; }; }; -- Pozdrawiam, Aleksander K

Re: Reason for Limited number of Root DNS Servers

2011-11-11 Thread Aleksander Kurczyk
There is more than 13 physical root servers but these servers have only 13 domain names (a-m.root-servers.net) and ip addresses. Only 13 because of limitation of single DNS message to 512 bits (RFC 1035). http://root-servers.org -- List and map of the root servers Dnia 11 listopada 2011 6:38 Gaur

BIND started several times at one time

2011-11-15 Thread Aleksander Kurczyk
Hello, Is it possible to run named several times at one time on one computer on one OS at different ports and with different config files? I would like to simulate multiple servers on one PC. -- Pozdrawiam, Aleksander Kurczyk ___ Please visit https

Re: BIND started several times at one time

2011-11-15 Thread Aleksander Kurczyk
tions? Dnia 16 listopada 2011 1:08 Chuck Swiger napisał(a): > On Nov 15, 2011, at 4:00 PM, Aleksander Kurczyk wrote: > > Is it possible to run named several times at one time on one computer on > > one OS at different ports and with different config files? I would like to > >

Port number in A record in zone file

2011-11-17 Thread Aleksander Kurczyk
{ none; }; }; zone "0.0.127.in-addr.arpa" IN { type master; file "named.local"; allow-update { none; }; }; 095160160157:/var/named root# cat srv3/srv3.local.master $TTL 1d $ORIGIN srv3.local. @ IN SOA ns1 hostmaster 201700 12h 5m 3w 2

Re: Port number in A record in zone file

2011-11-17 Thread Aleksander Kurczyk
ut virtual machines. -- Pozdrawiam, Aleksander Kurczyk ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: Port number in A record in zone file

2011-11-17 Thread Aleksander Kurczyk
It works :) Thanks very much Dnia 17 listopada 2011 15:52 Matthew Seaman napisał(a): > On 17/11/2011 14:41, Aleksander Kurczyk wrote: > > If not, it is possible to map traffic from 127.0.0.11:53, > > 127.0.0.12:53 and 127.0.0.13:53 to 127.0.0.1:2001, 127.0.0.1:2002 and > &