help on NESC3PARAM

Stephane Bortzmeyer bortzmeyer at nic.fr
Thu May 6 09:19:05 UTC 2010


On Thu, May 06, 2010 at 02:25:45PM +0530,
 rams <bramesh80 at gmail.com> wrote 
 a message of 36 lines which said:

> How to sign  a zone for getting  NSEC3, NSEC3PARAM RR's in a signed zone.

Regarding this question and your previous one, it may be a good idea
to start reading the documentation:

-3 salt
              Generate a NSEC3 chain with the given hex encoded salt. A dash (salt) can be used to
              indicate that no salt is to be used when generating the NSEC3 chain.

       -H iterations
              When generating a NSEC3 chain use this many interations. The default is 100.

       -A     When generating a NSEC3 chain set the OPTOUT flag on all NSEC3 records and do not
              generate NSEC3 records for insecure delegations.




More information about the bind-users mailing list