parental-agents clause - IP address only ?

vom513 vom513 at gmail.com
Mon Dec 5 16:17:20 UTC 2022


> On Dec 5, 2022, at 4:06 AM, Matthijs Mekking <matthijs at isc.org> wrote:
> 
> 'parental-agents' work the same as 'primaries'. It only supports addresses.
> 
> Listing them as domain names would technically be possible to implement, but it requires an authoritative server to act as an resolver. Adding resolver code to the path of an authoritative server is like crossing the streams. It adds security risks that are unnecessary for an authoritative server, so I'd rather not add such functionality.
> 

Thanks for the confirmation - and yes makes sense.

Also thanks to Timothe in this thread for the script inspiration.  I cooked my own up and tested it - works brilliant.  I also added some logic to email me if there is a diff from the last run.  Will be interesting to see how often there actually is.



More information about the bind-users mailing list