Re: Question on allow-update and update-policy

2010-06-14 Thread Angela Perez
Thankyou very much Chris, this worked! --a On Sat, Jun 12, 2010 at 11:20 PM, Chris Buxton chris.p.bux...@gmail.com wrote: There is a way when using allow-update. I have no idea if this works with update-policy. It looks something like this: allow-update { ! { ! { ip-addrs; }; any; };

Question on allow-update and update-policy

2010-06-12 Thread Angela Perez
Hi, I have a question on using signed (TSIG) dynamic updates. My understanding is that both allow-update and update-policy allows either a host or a key. Is there any way (or workaround) to make bind only accept dynamic updates from a specific host that has the specific key? The problem I have

Re: Question on allow-update and update-policy

2010-06-12 Thread Chris Buxton
There is a way when using allow-update. I have no idea if this works with update-policy. It looks something like this: allow-update { ! { ! { ip-addrs; }; any; }; key-name; }; To understand this, remember that a negative ACL is not the same as not listing the IP at all. It says, in essence, Deny