head scratcher: nsupdate, Bind views, and TLSA record updates

Kevin bind-users-ml at thesandiegos.com
Wed Nov 1 23:09:18 UTC 2017

I think it's sorted, thanks all. 


From: "Tony Finch" <dot at dotat.at> 
To: bind-users at isc.org 
Sent: Wednesday, November 1, 2017 2:50:32 AM 
Subject: Re: head scratcher: nsupdate, Bind views, and TLSA record updates 

Mark Andrews <marka at isc.org> wrote: 
> More correctly _tcp.mail.thesandiegos.com is delegated to 
> ns1._tcp.mail.thesandiegos.com ( but the machine is 
> not configured to serve that zone. 

This also explains the puzzling check-names problem earlier - 
ns1._tcp.mail.thesandiegos.com is a host name (because it is the target 
of an NS record) but underscores are not allowed in hostnames. This 
restriction does not apply to TLSA records. 

f.anthony.n.finch <dot at dotat.at> http://dotat.at/ - I xn--zr8h punycode 
Rockall, Malin: West or southwest, veering north or northwest, 4 or 5, 
occasionally 6 at first, becoming variable 3 or 4 later. Slight or moderate, 
occasionally rough in north Rockall. Occasional rain at first. Moderate or 
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list 

bind-users mailing list 
bind-users at lists.isc.org 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20171101/4643c66b/attachment.html>

More information about the bind-users mailing list