Re: False positive on inscure zone update by IP?

Hi Kevin, On Mon, Nov 28, 2016 at 05:39:16PM +, Darcy Kevin (FCA) wrote: > why > specify "allow-update { none; };" when that's the default? [...] > If you're doing that only for documentation purposes, you could use a > comment instead. Thanks Kevin! It never occured to me to just try commen

Re: False positive on inscure zone update by IP?

Hi, On Fri, Nov 18, 2016 at 06:32:26PM +0100, Michael Weiser wrote: > zone 'localhost' allows updates by IP address, which is insecure [...] > So I wonder: Can I ignore these messages? No idea, anyone? Should I take this to the devel list? --

False positive on inscure zone update by IP?

Hi, today I noticed the following log messages from my caching-only bind on startup: zone 'localhost' allows updates by IP address, which is insecure zone 'version.bind' allows updates by IP address, which is insecure zone 'hostname.bind' allows updates by IP address, which is insecure zone 'auth