TSIG and ACL?

[Cricket Liu]

> How do I restrict zone transfer to slaves in my ACL and a TSIG key?
>
> acl slaves {
>         192.168.1.1;
>         172.16.56.193;
>         10.0.0.149;
>         };
>
> key "key" {
>         algorithm       hmac-md5;
>         secret "*********"
> };

Learned this one from Mark:

acl notslaves { ! slaves; };

options {
    allow-transfer { ! notslaves; key key; };
};

cricket

Men & Mice
DNS Software & Services
www.menandmice.com