Comments on: Bind Security: Transaction Signatures (TSIG) Configuration http://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/ Every answer asks a more beautiful question. Fri, 10 Feb 2012 19:55:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: GUIgao Panghttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-64030 GUIgao Pang Wed, 02 Nov 2011 09:18:52 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-64030 Looking at a very simple configuration, but in two server configuration, respectively, after the completion of the test found that always tip NotAuth is this why? 04:28:42.285594 IP 192.168.2.119.60885 > 192.168.2.127.domain: 1993+ A? www.test.qq. (29) 04:28:42.286449 IP 192.168.2.127.34074 > 192.168.2.126.domain: 41773 [2au] A? www.test.qq. (117) 04:28:42.286589 IP 192.168.2.127.36183 > 192.168.2.126.domain: 52125 [2au] NS? . (105) 04:28:42.288131 IP 192.168.2.126.domain > 192.168.2.127.34074: 41773 NotAuth- 0/0/2 (123) 04:28:42.288382 IP 192.168.2.127.domain > 192.168.2.119.60885: 1993 ServFail 0/0/0 (29) 04:28:42.289374 IP 192.168.2.126.domain > 192.168.2.127.36183: 52125 NotAuth- 0/0/2 (111) Looking at a very simple configuration, but in two server configuration, respectively, after the completion of the test found that always tip NotAuth is this why?

04:28:42.285594 IP 192.168.2.119.60885 > 192.168.2.127.domain: 1993+ A? http://www.test.qq. (29)
04:28:42.286449 IP 192.168.2.127.34074 > 192.168.2.126.domain: 41773 [2au] A? http://www.test.qq. (117)
04:28:42.286589 IP 192.168.2.127.36183 > 192.168.2.126.domain: 52125 [2au] NS? . (105)
04:28:42.288131 IP 192.168.2.126.domain > 192.168.2.127.34074: 41773 NotAuth- 0/0/2 (123)
04:28:42.288382 IP 192.168.2.127.domain > 192.168.2.119.60885: 1993 ServFail 0/0/0 (29)
04:28:42.289374 IP 192.168.2.126.domain > 192.168.2.127.36183: 52125 NotAuth- 0/0/2 (111)

]]> By: Babu Satasiyahttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-46241 Babu Satasiya Wed, 03 Mar 2010 19:34:58 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-46241 nice to have secure zone transfer and you made it simpler for all. Thank you. nice to have secure zone transfer and you made it simpler for all. Thank you.

]]> By: ashok reddyhttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-45767 ashok reddy Sun, 31 Jan 2010 07:27:54 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-45767 Wonderful document ! Super simple steps.. Thanks much Have a gr8 day. Ashok reddy Wonderful document !

Super simple steps.. Thanks much

Have a gr8 day.

Ashok reddy

]]> By: Alejandrohttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40757 Alejandro Sat, 14 Mar 2009 20:16:38 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40757 It Works. OpenBSD 4.4 (master chrooted) and Debian Lenny (slave chrooted). Your website is very useful ! Thank You Very Much. It Works. OpenBSD 4.4 (master chrooted) and Debian Lenny (slave chrooted).

Your website is very useful !

Thank You Very Much.

]]> By: Dannyhttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40297 Danny Sat, 14 Feb 2009 19:29:49 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40297 Not sure I fully understand the question, but it's on a VPS so I guess the answer's probably yes Not sure I fully understand the question, but it’s on a VPS so I guess the answer’s probably yes

]]> By: Vivek Gitehttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40296 Vivek Gite Sat, 14 Feb 2009 19:23:59 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40296 Do you run bind in chrooted jail? Do you run bind in chrooted jail?

]]> By: Dannyhttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40295 Danny Sat, 14 Feb 2009 18:39:10 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40295 I'm trying to impliment this, but when I restart named, it says it can't find the tsig.key file, I've quadruple checked for any typo's Any clues (I'm tearing my hair out!!) I’m trying to impliment this, but when I restart named, it says it can’t find the tsig.key file, I’ve quadruple checked for any typo’s

Any clues (I’m tearing my hair out!!)

]]> By: Tapas Mallickhttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40027 Tapas Mallick Wed, 28 Jan 2009 10:05:40 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40027 Nice and lucid document to understand and implement. I would like to request you to post same kind of document for "Dynamic DNS with DHCP" and "Secure NTP". Regards, Tapas Nice and lucid document to understand and implement. I would like to request you to post same kind of document for “Dynamic DNS with DHCP” and “Secure NTP”.

Regards,
Tapas

]]> By: mostafahttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40015 mostafa Tue, 27 Jan 2009 16:54:13 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40015 very small and very effective it's the first time for me to understand this thanx very much very small and very effective it’s the first time for me to understand this

thanx very much

]]> By: Jerehttp://www.cyberciti.biz/faq/unix-linux-bind-named-configuring-tsig/#comment-40014 Jere Tue, 27 Jan 2009 14:13:33 +0000 http://www.cyberciti.biz/faq/?p=3167#comment-40014 Cool, thats pretty easy! Thank you! Cool, thats pretty easy!
Thank you!

]]>