Path: csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!news.glorb.com!usenet.stanford.edu!not-for-mail
From: Evan Hunt <each@isc.org>
Newsgroups: comp.protocols.dns.bind
Subject: Re: Securing zone transfer and DDNS
Date: Mon, 7 Nov 2011 15:17:46 +0000
Lines: 9
Approved: bind-users@lists.isc.org
Message-ID: <mailman.10.1320679115.68562.bind-users@lists.isc.org>
References: <21ed7915.4729b742.4eb72f52.7f82@o2.pl> <4EB746D7.9000205@dougbarton.us> <687fd44f.1f6eb34b.4eb7ebcc.d7948@o2.pl> <20111107145934.GA2884@jmbp.jpmens.org>
NNTP-Posting-Host: lists.isc.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: usenet.stanford.edu 1320679115 7491 149.20.64.75 (7 Nov 2011 15:18:35 GMT)
X-Complaints-To: action@cs.stanford.edu
Cc: bind-users@lists.isc.org
To: Jan-Piet Mens <jpmens.dns@gmail.com>
Return-Path: <each@isc.org>
X-Original-To: bind-users@lists.isc.org
Delivered-To: bind-users@lists.isc.org
Content-Disposition: inline
In-Reply-To: <20111107145934.GA2884@jmbp.jpmens.org>
User-Agent: Mutt/1.4.2.3i
X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00, T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mx.ams1.isc.org
X-BeenThere: bind-users@lists.isc.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe: <https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive: <https://lists.isc.org/pipermail/bind-users>
List-Post: <mailto:bind-users@lists.isc.org>
List-Help: <mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe: <https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
Xref: x330-a1.tempe.blueboxinc.net comp.protocols.dns.bind:50

> Create your keys with the dnssec-keygen utility (check its manual page).

Or 'ddns-confgen' is somewhat simpler.  Its output is already in the
format named.conf wants, and the keys it generates can be repurposed
for other uses than DDNS.

-- 
Evan Hunt -- each@isc.org
Internet Systems Consortium, Inc.