AW: Problem upgrading to 9.18 - important feature being removed

Klaus Darilion klaus.darilion at nic.at
Tue Feb 27 19:37:47 UTC 2024


> -----Ursprüngliche Nachricht-----
> Von: bind-users <bind-users-bounces at lists.isc.org> Im Auftrag von Carsten
...
> It would be nice to have a "dry-run" mode in BIND 9, where BIND 9 would
> report steps it would do because of "dnssec-policy", but will not execute the
> changes.

If this Bind9 is only a hidden primary, disable all outgoing XFR for the respective zone, and make a copy of the Bind config and zone/journal files. That way you could test the new config and avoid leakage of broken/unwanted zones.

Regards
Klaus


More information about the bind-users mailing list