dnssec update

[Tony Finch]

Graham Clinch <g.clinch at lancaster.ac.uk> wrote:
>
> However, the 'allow-update' stanza makes me wonder whether you're mixing
> dynamic updates with manual zonefile changes - I'm not sure whether
> inline-signing can support a mixture of dynamic and manual
> modifications.

It is generally true (with DNSSEC or without) that you can't mix dynamic
updates and direct zone file editing. If you can't use nsupdate for
whatever reason, you need to use rndc freeze before you edit the file and
rndc thaw afterwards.

(Thanks for plugging nsdiff for me!)

Tony.
-- 
f.anthony.n.finch  <dot at dotat.at>  http://dotat.at/
West Southeast Iceland: Westerly backing southerly, 6 to gale 8. Very rough or
high. Wintry showers. Good, occasionally poor.