From owner-freebsd-questions@FreeBSD.ORG  Wed Sep 22 04:09:09 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9898916A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Sep 2004 04:09:09 +0000 (GMT)
Received: from ns1.tiadon.com (SMTP.tiadon.com [69.27.132.161])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3849F43D45
	for <freebsd-questions@freebsd.org>;
	Wed, 22 Sep 2004 04:09:09 +0000 (GMT)	(envelope-from kdk@daleco.biz)
Received: from [69.27.131.0] ([69.27.131.0]) by ns1.tiadon.com with Microsoft
	SMTPSVC(6.0.3790.0);	 Tue, 21 Sep 2004 23:09:10 -0500
Message-ID: <4150FAE2.3080709@daleco.biz>
Date: Tue, 21 Sep 2004 23:09:06 -0500
From: "Kevin D. Kinsey, DaleCo, S.P." <kdk@daleco.biz>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7) Gecko/20040712
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: jmlewis@dslextreme.com
References: <13da0a2fd30a4b320a41920a.20040921204428.wzyrjvf@www.dslextreme.com>
In-Reply-To: <13da0a2fd30a4b320a41920a.20040921204428.wzyrjvf@www.dslextreme.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 22 Sep 2004 04:09:11.0593 (UTC)
	FILETIME=[EA41C990:01C4A059]
cc: freebsd-questions@freebsd.org
Subject: Re: random device settings on bind9
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 22 Sep 2004 04:09:09 -0000

Joshua Lewis wrote:

>I have set up bind 9.2.3 on 4.10. I followed the instructions for setting
>up random as per the instructions at the end of the bind install.
>
>the instructions say to add the rndc-key in my namd.conf. I was wondering
>if that is a good idea? Doesn't this file get quarried by people on the
>Internet. So am I basically just showing my secret key to everyone?
>
>
>Thank you,
>Joshua Lewis
>
>  
>

Well, what's available to the Internet is the information in the
zone files, not the daemon's configuration file, so I'd think you'd
be safe.

YMMV.

KDK