From owner-freebsd-questions  Fri May  4  9:49:54 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from d9168.upc-d.chello.nl (d9168.upc-d.chello.nl [213.46.9.168])
	by hub.freebsd.org (Postfix) with ESMTP id A9ED137B424
	for <freebsd-questions@freebsd.org>; Fri,  4 May 2001 09:49:51 -0700 (PDT)
	(envelope-from edwin@d9168.upc-d.chello.nl)
Received: by d9168.upc-d.chello.nl (Postfix, from userid 1001)
	id 319CD2CD; Fri,  4 May 2001 18:49:50 +0200 (CEST)
Date: Fri, 4 May 2001 18:49:50 +0200
From: Edwin Groothuis <edwin@mavetju.org>
To: Wayne Pascoe <wayne.pascoe@realtime.co.uk>
Cc: freebsd-questions@freebsd.org
Subject: Re: Purpose of serial number in zone files (BIND)
Message-ID: <20010504184950.G50786@d9168.upc-d.chello.nl>
Mail-Followup-To: Edwin Groothuis <edwin@mavetju.org>,
	Wayne Pascoe <wayne.pascoe@realtime.co.uk>,
	freebsd-questions@freebsd.org
References: <m1wv7xdww5.fsf@zaphod.realtime.co.uk> <20010504163252.D50786@d9168.upc-d.chello.nl> <m1k83xdvu3.fsf@zaphod.realtime.co.uk> <20010504160732.A1139@cartman.techsupport.co.uk> <m166fhdtyr.fsf@zaphod.realtime.co.uk> <20010504173201.E50786@d9168.upc-d.chello.nl> <m1lmodcdrk.fsf@zaphod.realtime.co.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <m1lmodcdrk.fsf@zaphod.realtime.co.uk>; from wayne.pascoe@realtime.co.uk on Fri, May 04, 2001 at 04:52:47PM +0100
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Fri, May 04, 2001 at 04:52:47PM +0100, Wayne Pascoe wrote:
> Edwin Groothuis <edwin@mavetju.org> writes:
> > Why don't you let the DNS protocol handle the distribution towards
> > the slaves? Then you only have to worry about the creation on the
> > master. I really don't see the advantages of what you try to
> > accomplish.
> 
> That is one possiblity. But we can do database access over ssh
> tunnel. Also, I want to dissallow zone transfers by default for
> slightly increased security. AFAIK, some of the bind bugs have been
> related to zone transfers.

You can limit that with the "allow-transfer" statement.

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                     http://FatalDimensions.nl.eu.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message