RE: nsupdate on bind 8 stealth master server

-----Original Message-----
From: Kevin Darcy [mailto:kcd@daimlerchrysler.com]
Sent: Monday, July 07, 2003 11:44 PM
To: comp-protocols-dns-bind@isc.org
Subject: Re: nsupdate on bind 8 stealth master server


Peter.Davies@sas.dk wrote:

> A quick question:
> Can I user ( bind 9 ) nslupdate to update a master zones on a stealth
bind
> 8 servere.
> For security reasons the server is configured to only allow updates only
> from it's til loopback address
> I've tried using the server keyword but nsupdate only tries to update
the
> server found soa record.

Strange, I use the "server" keyword to update a stealth hidden master all
the
time without any problems.

Do you have any "-d" output that you can share?

Note that nsupdate will still do preparatory queries even with the
"server" keyword, because even though it doesn't need to see the SOA in
order
to determine the master server, it still needs to find out what zone it is
updating. To completely eliminate nsupdate's queries you need both
"server" and "zone" keywords...


- Kevin