TSIG and ACL?

Ted Stephens tls at columbus.rr.com
Tue Sep 25 11:17:34 UTC 2001


Thanks for the answer. It seems like a double negative?. Can you explain 
how this works?
	Ted


In article <9oosj6$45u at pub3.rc.vix.com>, cricket at nxdomain.com says...
> > How do I restrict zone transfer to slaves in my ACL and a TSIG key?
> >
> > acl slaves {
> >         192.168.1.1;
> >         172.16.56.193;
> >         10.0.0.149;
> >         };
> >
> > key "key" {
> >         algorithm       hmac-md5;
> >         secret "*********"
> > };
> 
> Learned this one from Mark:
> 
> acl notslaves { ! slaves; };
> 
> options {
>     allow-transfer { ! notslaves; key key; };
> };
> 
> cricket
> 
> Men & Mice
> DNS Software & Services
> www.menandmice.com
> 
> 
> 
> 
> 
> 

-- 
Ted Stephens CNE, A+, CCA


More information about the bind-users mailing list