is named-xfer command safe to run in Dynamic DNS ?

[Joseph S D Yao]

On Fri, Apr 22, 2005 at 11:35:30AM -0700, bob_a_booie wrote:
> Hi DNS Gurus
> I am running BIND 9.2.3 on Solaris 8
> 
> is the /usr/sbin/named-xfer  command safe to run
> in a Dynamic DNS environment ?
> 
> Thank you

ISTM named-xfer is left over from your BIND 8.2.2-P5 delivered with S8.
It is not part of BIND 9.2.3.  Part of the increased security design in
BIND 9 was NOT to use this, IIRC.

Use 'nsupdate' to update your DDNS zone(s).  You _have_ separated your
static and dynamic zones out, right?

OBTW, BIND 9.3.1 is out and fixes more security problems and provides
more features.

-- 
Joe Yao
-----------------------------------------------------------------------
   This message is not an official statement of OSIS Center policies.