On 11/13/23 12:35, [email protected] wrote:
> hi,
> Nov 13, 2023 11:26:15 Matthew Richardson <[email protected]>:
> 
[...]

>> which runs as a daily job via cron.  Obviously, this only does the
>> recording into a git repo, but does not do any alerting
> For alerting and stopping a zone before XFR to secondaries nsd verifier 
> functionality can be used. A script can store a previous value and allow new 
> zones only if the tests (supplied by you) are met e.g. the size of the zone 
> should change x% at max, not more.
> Bump in the wire verifier.

Also for those who are using opendnssec - "NotifyCommand" is a place where one 
can hook in something similar.

https://www.opendnssec.org/wp-content/uploads/2009/06/opendnssec-start-guide.pdf#subsection.2.1

Regards,
  Tamás

_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to