[Opendnssec-user] OpenDNSSEC & BIND

Jakob Schlyter jakob at kirei.se
Fri Jan 31 11:56:56 UTC 2014


Ramanou,

Something like this should work:

view "unsigned" {
	match-clients { 10.0.0.2; };  # match signer only

	zone "example.com" {
		type master;
		file "/var/named/unsigned/example.com";
	};
};

view "signed" {
        match-clients { any; };  # match anyone else

	zone "example.com" {
		type slave;
		masters { 10.0.0.2; };
		file "/var/named/signed/example.com";
	};
};



Enjoy,

	jakob




More information about the Opendnssec-user mailing list