On Sep 30, 2008, at 9:08 PM, Mark Andrews wrote: > In message <[EMAIL PROTECTED]>, John Wobus > writes: >> I've been told that Microsoft's DNS server allows a zone to be updated >> dynamically, yet some names in the zone be protected from changes via >> dynamic updates. And I was told that BIND lacks this feature, having >> its granularity of >> control strictly by zone. I would assume Microsoft's GUI makes this >> simple to manage, >> :-) but the mechanism would be functionally like having a list of >> names >> stored somewhere >> that the dynamic update mechanism would refuse to modify in the zone >> file. > > Named can control down to the record type. > See update-policy.
I see. Hm, then I was told wrong (or just as likely, I misunderstood what I was told). I see that the DNS & BIND Cookbook even gives me an example of its usage, and that "down to the record type" includes the ability to specify the name and some kinds of wildcard matching of the name. John
