Id like to use a HMAC-MD5 Transaction Signature to secure dynamic updates on my Bind 9 DNS server. How do I do?
First generate a key using the dnssec-keygen tool provided in the Bind package. At a command prompt, type: dnssec-keygen -a hmac-md5 -b 128 -n HOST tsig.myzone.org. Replace 128 with 256 or 512, if you need a stronger encryption. Replace myzone.org. with your actual zone name. This command will create two files which hold the key information e.g.: Ktsig.myzone.org.+157+54326.key Ktsig.myzone.org.+157+54326.private Now edit the named.conf file (in the \etc folder) and add the key information (extracted from the previous files) before your zone and add an allow-update { key … } line to your zone like in the example below: key tsig.myzone.org. { algorithm hmac-md5; secret “Ncdq+ViRYWkQHS53QxPyuE==”; }; zone “myzone.org.” in { type master; file “db.myzone.org”; allow-update { key tsig.myzone.org.; }; … }; Finally, in DynSite, in DNS Account Properties, select Transaction Signature (hmac-md5) as the authentication method and enter the key name and value, like in the example below: Key na
Related Questions
- Is it possible to do secure dynamic updates to a Microsoft DNS Server (Windows 2000/2003 or later) instead of a dynamic DNS service?
- Id like to use a HMAC-MD5 Transaction Signature to secure dynamic updates on my Bind 9 DNS server. How do I do?
- How do I configure dynamic Domain Name Server ( DNS ) (DDNS) ?
