[Opendnssec-user] OpenDNSSEC & BIND

Jakob Schlyter jakob at kirei.se
Fri Jan 31 12:36:44 UTC 2014

On 31 jan 2014, at 13:33, Gavin Brown <gavin.brown at centralnic.com> wrote:

> I recently built a BIND config very similar to this. Rather than using
> match-clients in each view, I gave each view its own IP address and used
> match-destinations.
> This means you can query the signed and unsigned views remotely, which
> is handy for debugging and monitoring.

Yes, that is a much nicer solution. You can also select view based on the TSIG used in the DNS query, a solution that could confuse even the most experienced DNS administrator :-)


Jakob Schlyter
Kirei AB - www.kirei.se

More information about the Opendnssec-user mailing list