Re: I want to set my own DDNS service

On 01/13/2012 02:05 PM, Christian Brandt wrote:
Am 16.12.2011 11:26, schrieb alike:

Bind9 or something else ?
So, the idea is to make something like dyndns service but for few
costumers.

Bind9 offers a tool names dnsupdate if I remember right. I haven't use
it for many years and started to use hopto.org instead.

dnsupdate can directly connect to the nameserver and change lots of
settings, authenticating with a key against a defined area of change.

I think Bind9 is fairly easy to use. But using dnsupdate with secured
communication and defined areas of change is a hell of a lot more
complex. Definitly nothing for faint of heart.

An example setting named.conf.local:

key ns.example.com { algorithm hmac-md5; secret
"dfkghkldfhglkshdfgklhlsdfglkjsdfhgklhs=="; };
controls { inet 127.0.0.1 allow { any; } keys { ns.example.com; }; };

This one defines that localhost using key ns.example.com can change
anything.

Other example:

update-policy {
grant ns.example2.com. wildcard *.example2.com.;
grant *. self *.;
};

The key ns.example2.com may change zone files for and below example2.com.

I found that dnsupdate sometimes doesn't do anything and therefore I
suggest to test the settings and retry until it works.

Christian Brandt
-----------------
Hi Christian.
Can i contact you per mail. It will be faster and simpler.

.