Path: csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder3.hal-mli.net!newsfeed.hal-mli.net!feeder1.hal-mli.net!news.glorb.com!usenet.stanford.edu!not-for-mail
From: =?UTF-8?Q?Aleksander_Kurczyk?= <aleksanderkurczyk@o2.pl>
Newsgroups: comp.protocols.dns.bind
Subject: =?UTF-8?Q?Securing_zone_transfer_and_DDNS?=
Date: Mon, 07 Nov 2011 02:07:30 +0100
Lines: 37
Approved: bind-users@lists.isc.org
Message-ID: <mailman.2.1320628111.68562.bind-users@lists.isc.org>
NNTP-Posting-Host: lists.isc.org
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Trace: usenet.stanford.edu 1320628112 5426 149.20.64.75 (7 Nov 2011 01:08:32 GMT)
X-Complaints-To: action@cs.stanford.edu
To: bind-users@lists.isc.org
Return-Path: <aleksanderkurczyk@o2.pl>
X-Original-To: bind-users@lists.isc.org
Delivered-To: bind-users@lists.isc.org
X-Originator: 95.160.160.157
X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,FREEMAIL_FROM, SARE_SUB_ENC_UTF8,T_TO_NO_BRKTS_FREEMAIL autolearn=no version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mx.ams1.isc.org
X-BeenThere: bind-users@lists.isc.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: BIND Users Mailing List <bind-users.lists.isc.org>
List-Unsubscribe: <https://lists.isc.org/mailman/options/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=unsubscribe>
List-Archive: <https://lists.isc.org/pipermail/bind-users>
List-Post: <mailto:bind-users@lists.isc.org>
List-Help: <mailto:bind-users-request@lists.isc.org?subject=help>
List-Subscribe: <https://lists.isc.org/mailman/listinfo/bind-users>, <mailto:bind-users-request@lists.isc.org?subject=subscribe>
Xref: x330-a1.tempe.blueboxinc.net comp.protocols.dns.bind:42

Hello,
I=20just=20reading=20a=20book=20called=20"Pro=20DNS=20and=20BIND=2010"=20=
written=20by=20Ron=20Aitchrison.=20I'm=20stuck=20in=20chapter=2010=20call=
ed=20"DNS=20Secure=20Configurations".=20There's=20described=20how=20to=20=
secure=20zone=20transfer=20and=20dynamic=20updates.=20The=20author=20has=20=
used=20one=20key=20to=20secure=20both=20the=20zone=20transfer=20and=20the=
=20dynamic=20updates=20but=20I=20want=20to=20use=20two=20separate=20keys.=
=20Unfortunately=20when=20I=20add=20to=20the=20keys=20option=20in=20serve=
r=20section=20more=20than=20one=20key=20the=20named=20doesn't=20start=20a=
nymore.=20Format=20of=20the=20key=20option=20in=20the=20book=20is=20diffe=
rent=20than=20in=20the=20manual.=20When=20I=20remove=20whole=20server=20s=
ection=20everything=20works=20ok.=20Is=20the=20keys=20section=20important=
?=20For=20what=20this=20section=20is=20for?=20How=20can=20I=20use=20one=20=
key=20to=20secure=20zone=20transfer=20to=20one=20host=20and=20other=20to=20=
secure=20zone=20transfer=20to=20other=20host?=20It=20is=20possible?

Part=20of=20the=20named.conf:
include=20"key";

server=20127.0.0.1=20{
keys=20{=20"key";=20};
};

zone=20"my.zone"=20in=20{
type=20master;
file=20"my.zone";
allow-transfer=20{=20key=20"key";=20};
allow-update=20{=20key=20"key";=20};
};

Thanks=20in=20advance.

--=20
Pozdrawiam,
Aleksander=20Kurczyk