I'd like my global BIND server to slave a copy of my zone from the master being hosted on my LAN. It appears that this is called a stealth setup. I figured I'd achieve this by having the secondary on the internet slave a view, but I've read that this is not ideal from a security standpoint. The argument being that the zone file contains an IP address of it's master. So whats the best way to do this?
A stealth scenario also seems susceptible to a higher chance where the connection is lost between master and slave (complicated by a LAN firewall/ISP in between) and the expire exceeding. We're hosting our global DNS through a provider, so there doesnt seem like an easy way to monitor and confirm a zone transfer from our master alone. Any recommendations?
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
