Am 16.12.2011 11:26, schrieb alike:
> Bind9 or something else ?
> So, the idea is to make something like dyndns service but for few
> costumers.
Bind9 offers a tool names dnsupdate if I remember right. I haven't use
it for many years and started to use
hopto.org instead.
dnsupdate can directly connect to the nameserver and change lots of
settings, authenticating with a key against a defined area of change.
I think Bind9 is fairly easy to use. But using dnsupdate with secured
communication and defined areas of change is a hell of a lot more
complex. Definitly nothing for faint of heart.
An example setting named.conf.local:
key
ns.example.com { algorithm hmac-md5; secret
"dfkghkldfhglkshdfgklhlsdfglkjsdfhgklhs=="; };
controls { inet 127.0.0.1 allow { any; } keys {
ns.example.com; }; };
This one defines that localhost using key
ns.example.com can change
anything.
Other example:
update-policy {
grant
ns.example2.com. wildcard *.
example2.com.;
grant *. self *.;
};
The key
ns.example2.com may change zone files for and below
example2.com.
I found that dnsupdate sometimes doesn't do anything and therefore I
suggest to test the settings and retry until it works.
Christian Brandt