Re: nsupdate on bind 8 stealth master server

Peter.Davies@sas.dk wrote:

> A quick question:
> Can I user ( bind 9 ) nslupdate to update a master zones on a stealth bind
> 8 servere.
> For security reasons the server is configured to only allow updates only
> from it's til loopback address
> I've tried using the server keyword but nsupdate only tries to update the
> server found soa record.

Strange, I use the "server" keyword to update a stealth hidden master all the
time without any problems.

Do you have any "-d" output that you can share?

Note that nsupdate will still do preparatory queries even with the
"server" keyword, because even though it doesn't need to see the SOA in order
to determine the master server, it still needs to find out what zone it is
updating. To completely eliminate nsupdate's queries you need both
"server" and "zone" keywords...


- Kevin