From owner-freebsd-questions@FreeBSD.ORG Tue Oct 12 10:34:58 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 167EB16A4D1 for ; Tue, 12 Oct 2004 10:34:58 +0000 (GMT) Received: from mailbox.rainbownet.com (mailbox.rainbownet.com [213.174.191.133]) by mx1.FreeBSD.org (Postfix) with ESMTP id DBEBA43D2F for ; Tue, 12 Oct 2004 10:34:56 +0000 (GMT) (envelope-from aturetta@commit.it) Received: from 81.174.12.226 ([81.174.12.226]) (authenticated user aturetta@rainbownet.com) by rainbownet.com (mailbox.rainbownet.com [127.0.0.1]) (MDaemon.PRO.v6.8.5.R) with ESMTP id 58-md50000000744.tmp for ; Tue, 12 Oct 2004 12:34:25 +0200 Message-ID: <416BB331.306@commit.it> Date: Tue, 12 Oct 2004 12:34:25 +0200 From: Angelo Turetta User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authenticated-Sender: aturetta@rainbownet.com X-Spam-Processed: mailbox.rainbownet.com, Tue, 12 Oct 2004 12:34:25 +0200 (not processed: message from valid local sender) X-MDRemoteIP: 81.174.12.226 X-Return-Path: aturetta@commit.it X-MDaemon-Deliver-To: freebsd-questions@freebsd.org Subject: bind: 5.3-BETA7 and ddns X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Oct 2004 10:34:58 -0000 With the new bind-9.3 and related infrastructure (chroot env. etc), what is the advised layout for updatable zones? If you add "allow-update {acl;};" in one of your master zones, the named daemon must be able both to write the zone file and to create the journal file, two things which cannot be be accomplished with the current permission settings. thanks for any hints Angelo. (please cc. replies to my address)