Dynamic Host DNS Registration

Danny Mayer mayer at gis.net
Fri Jul 8 02:48:27 UTC 2005


Jim Logan wrote:
> Danny Mayer wrote:
> 
>> Don't allow your Windows systems to update the DNS zone, have the DHCP
>> server do that. It's too insecure and much harder to manage the way you
>> are proposing. A DHCP server can send both A and PTR records as
>> necessary to BIND. You can also configure DHCP to authenticate itself
>> (with TSIG, IIRC) and only allow that system to update DNS.
> 
> 
> I don't think my SMC router/DHCP-server can do that.  I'll eventually 
> have to get DHCP working on my server I guess...
> 
> -Jim

Then I doubt that it's conformant to DHCP RFC's.

Danny




More information about the bind-users mailing list