[NSD-3.0.1] import the zone line

Wouter Wijngaards wouter at NLnetLabs.nl
Tue Sep 12 07:45:17 UTC 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Sebastian,

Yes you can do that, your nsd.conf has one mistake, you use 'include'
but NSD needs 'include:'.

So nsd.conf:
> # same ...
include: "master.conf"
include: "slave.conf"

Your master.conf (is OK):
> zone:
> name: "example.net"
> zonefile: "example.net.signed.zone"
> provide-xfr: 169.192.85.0/24 NOKEY

Your slave.conf has a problem.
The request-xfr needs one address to connect to.
The ip-address of the master server. So:
> zone:
> name: "example2.net"
> zonefile: "example2.net.signed.zone"
request-xfr: 169.192.85.33 NOKEY

You cannot give a subnet for request-xfr. The slave is not going to scan
a whole network looking for the master. :-)

At the moment the maximum nesting of include: directives is 10
(MAXINCLUDES define), so for include: files that include: files that
include: files that include: ... 10 deep.

No problems with the english,
   Wouter

Sebastian wrote:
> Hi,
> I have export my zone line to master.conf and slave.conf
> The can I include this File to the nsd.conf? 
> 
> Example nsd.conf 
> 
> server:
> ip-address: 1.2.3.4
> debug-mode: no
> ip4-only: yes
> database: "/var/db/nsd.database"
> logfile: "/var/log/nsd.log"
> pidfile: "/var/run/nsd.pid"
> include master.conf
> include slave.conf 
> 
> 
> Example master.conf 
> 
> zone:
> name: "example.net"
> zonefile: "example.net.signed.zone"
> provide-xfr: 169.192.85.0/24 NOKEY 
> 
> Example slave.conf 
> 
> zone:
> name: "example2.net"
> zonefile: "example2.net.signed.zone"
> request-xfr: 169.192.85.0/24 NOKEY 
> 
> Greet 
> 
> Sebastian S. 
> 
> PS: Sorry for my bad english ;)
> _______________________________________________
> nsd-users mailing list
> nsd-users at NLnetLabs.nl
> http://open.nlnetlabs.nl/mailman/listinfo/nsd-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFFBmWNkDLqNwOhpPgRAmMuAKCOdDL+dH/L639QxVBSBsP1KbjUCgCgs3Lv
C0w78XxfAlDlSjURjuJweUk=
=8ZOl
-----END PGP SIGNATURE-----



More information about the nsd-users mailing list