Re: Slaves or Forwarders?

2016-08-25 Thread Mark Andrews
uest. Mark > - Kevin > > -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of S Carr > Sent: Thursday, August 25, 2016 4:09 PM > To: bind-users > Subject: Re: Slaves or Forwarders? &g

RE: Slaves or Forwarders?

2016-08-25 Thread Darcy Kevin (FCA)
Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of S Carr Sent: Thursday, August 25, 2016 4:09 PM To: bind-users Subject: Re: Slaves or Forwarders? On 25 August 2016 at 21:06, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote: > just IXFRs or AXFRs too? > Isn't

Re: Slaves or Forwarders?

2016-08-25 Thread S Carr
On 25 August 2016 at 21:06, Matus UHLAR - fantomas wrote: > just IXFRs or AXFRs too? > Isn't edns over UDP enough in many cases? >From what I've seen in past testing any attempt to request an AXFR against BIND using UDP gets an immediate TC response. Steve

Re: Slaves or Forwarders?

2016-08-25 Thread Matus UHLAR - fantomas
In message <844475874024407090c1c2e9d5718...@mxph4chrw.fgremc.it>, "Darcy Kevin (FCA)" writes: From an InfoSec standpoint, of course one would prefer to use cryptographic methods of securing DNS data, but, in the absence of that, slaving could, arguably, be considered more secure than

RE: Slaves or Forwarders?

2016-08-24 Thread Tony Finch
Darcy Kevin (FCA) wrote: > From an InfoSec standpoint, of course one would prefer to use > cryptographic methods of securing DNS data, Yes, use TSIG for zone transfers. You can also use it for forwarding. Tony. -- f.anthony.n.finch http://dotat.at/

Re: Slaves or Forwarders?

2016-08-23 Thread Mark Andrews
In message <844475874024407090c1c2e9d5718...@mxph4chrw.fgremc.it>, "Darcy Kevin (FCA)" writes: > From an InfoSec standpoint, of course one would prefer to use > cryptographic methods of securing DNS data, but, in the absence of that, > slaving could, arguably, be considered more secure than

RE: Slaves or Forwarders?

2016-08-23 Thread Darcy Kevin (FCA)
nstances (e.g. IPSEC tunnels). - Kevin -Original Message- From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Tony Finch Sent: Tuesday, August 23, 2016 11:00 AM To: Baird, Josh Cc: bind-users@lists.isc.org Subject: Re: Slaves or Forwarders? Bai

Re: Slaves or Forwarders?

2016-08-23 Thread Tony Finch
Baird, Josh wrote: > > In the past, when I have had a requirement to bring a slave zone into > our environment; I created a slave zone on my master(s) (defining the > external nameserver as a master) and then created slave zones on my > slaves using *my* master as a master

Slaves or Forwarders?

2016-08-23 Thread Baird, Josh
Hi, In the past, when I have had a requirement to bring a slave zone into our environment; I created a slave zone on my master(s) (defining the external nameserver as a master) and then created slave zones on my slaves using *my* master as a master (not the master outside of my environment).