RE: how to hidden the salve

2014-02-26 Thread houguanghua
Thanks kevin. I'll try static-stub. > Date: Tue, 25 Feb 2014 10:56:11 -0500 > From: Kevin Darcy > To: bind-users@lists.isc.org > Subject: Re: how to hidden the salve > Message-ID: <530cbd1b.1060...@chrysler.com> > Content-Type: text/plain; charset="iso-88

Re: how to hidden the salve

2014-02-25 Thread Kevin Darcy
ic NSs are out of service. Thanks! Guanghua > Date: Mon, 24 Feb 2014 13:41:03 -0500 > From: Kevin Darcy > To: bind-users@lists.isc.org > Subject: Re: how to hidden the salve > Message-ID: <530b923f.8070...@chrysler.com> > Content-Type: text/plain; charset="iso-8859-

RE: how to hidden the salve

2014-02-25 Thread houguanghua
> To: bind-users@lists.isc.org > Subject: Re: how to hidden the salve > Message-ID: <530b923f.8070...@chrysler.com> > Content-Type: text/plain; charset="iso-8859-1"; Format="flowed" > > I guess I'm still not understanding your requirements. In my thinking

Re: how to hidden the salve

2014-02-24 Thread Kevin Darcy
records. Also-notify directive. Either in an options stanza or a zone stanza. > > thanks, > Guanghua -- Daniel J McDonald, CISSP # 78281 > Date: Thu, 20 Feb 2014 10:48:36 -0500 > From: Kevin Darcy > To: bind-users@lists.isc.org > Subject: Re: how to hidden the salve >

Re: how to hidden the salve

2014-02-24 Thread houguanghua
#x27;t in the NS records. Also-notify directive. Either in an options stanza or a zone stanza. > > thanks, > Guanghua -- Daniel J McDonald, CISSP # 78281 > Date: Thu, 20 Feb 2014 10:48:36 -0500 > From: Kevin Darcy > To: bind-users@lists.isc.org > Subject: Re: how

Re: how to hidden the salve

2014-02-20 Thread Kevin Darcy
A "stealth" slave has a full copy of the zone, is not published in the NS records, and can resolve names in the latest copy of the zone that it transferred, even if all of the published NSes are down due to a DDoS attack. So, does that not meet the requirements?

Re: how to hidden the salve

2014-02-19 Thread houguanghua
"Stealth" slave doesn't fully meet the requirement. It's just part of the requirement to not publish the slave name server in the NS records. Further more, the 'stealth' slave is quired by local DNS server only when all name servers in the NS records are out of service ( maybe in case of dd