dnssec update

Tony Finch dot at dotat.at
Wed Mar 11 10:41:00 UTC 2015

Graham Clinch <g.clinch at lancaster.ac.uk> wrote:
> However, the 'allow-update' stanza makes me wonder whether you're mixing
> dynamic updates with manual zonefile changes - I'm not sure whether
> inline-signing can support a mixture of dynamic and manual
> modifications.

It is generally true (with DNSSEC or without) that you can't mix dynamic
updates and direct zone file editing. If you can't use nsupdate for
whatever reason, you need to use rndc freeze before you edit the file and
rndc thaw afterwards.

(Thanks for plugging nsdiff for me!)

f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
West Southeast Iceland: Westerly backing southerly, 6 to gale 8. Very rough or
high. Wintry showers. Good, occasionally poor.

More information about the bind-users mailing list