Re: Configuring DNSSEC for child domains

2013-05-06 Thread Jaap Winius
Quoting Mark Andrews : In message <5187c559.6040...@sidn.nl>, "Marco Davids (SIDN)" writes: On 05/06/13 16:09, Jaap Winius wrote: > > This shows two DS records in the parent zone, one not secure and one > bogus, and three DNSKEY records in the child zone, none of whi

Configuring DNSSEC for child domains

2013-05-06 Thread Jaap Winius
Hi folks, Setting up DNSSEC for a parent domain is relatively simple. The fiddly bit is probably where you have to figure out what your KSK is so that you can give it to your ISP. They can then create a DS record to verify a DNSKEY record in your domain and so complete the chain of trust.

Re: Automatic updates to internal views of slave zones?

2010-12-24 Thread Jaap Winius
Quoting Mark Andrews : You can just have the internal view transfer from the external view. key external { }; view internal { match-clients { !key external; 127.0.0.1; }; zone xxx { type slave; masters { 127.0.0.1 key external;

Automatic updates to internal views of slave zones?

2010-12-14 Thread Jaap Winius
Hi folks, Occasionally I set up a slave zone on my DNS so that I don't always have to wait for updates from the master. However, my named.conf has separate internal and external views. This file has separate internal and external entries for the above slave zone, although these share the