On Fri, Jul 24, 2015 at 11:52 AM, Mark Elkins <m...@posix.co.za> wrote:

> On Fri, 2015-07-24 at 15:44 +0000, Managed Pvt nets wrote:
> >
> >
> > On 24/07/2015 5:05:24 PM, "Alan Clegg" <a...@clegg.com> wrote:
> >
> > > Possible problems:
> > >    Mismatched keys.
> > >    Mismatched key names.
> > >    Mismatched clocks.
> >
> > Most likely mismatched key.  I have to figure out how to make sure my
> > master does not require TSIGs and my slave does not try to use them.
>
>
> TSIG is a step towards better security. Rather learn how to use it than
> go backwards. I see TSIG as a step towards DNSSEC...
>

I'm with Mark on this.  TSIG isn't that tough to figure out--a couple hours
and you should have it down.  Cricket/Paul's book, and Pro DNS and BIND 10
are good intros to the subject.  I'm installing a copy of Debian 8.1 for
myself right now--I'm curious to see what the stock BIND config looks like
(we use RHEL here at the office).

John
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to