{% extends "base.html" %} {% load bootstrap %} {% block content %}

Nameserver Shared Secret Generated
back to overview

New nameserver shared secret generated for you. Everytime you visit this page a new secret will be generated and the old one becomes invalid.

Secret: {{ shared_secret }}

How to configure your bind9 nameserver to accept dynamic DNS updates?

// configuration snippet for bind 9 nameserver (put it into /etc/bind9/named.conf )

key "{{ object.domain }}." {
    // everyone who has this key may update this zone:
    // must be same algorithm as in the Domain record of the nsupdate.info based service
    algorithm {{ object.get_bind9_algorithm }};
    // the secret is just a shared secret in base64-encoding, you don't need
    // to use a special tool to create it. Some random in base64 encoding should
    // be OK. must be same secret as in the Domain database record of the nsupdate.info based service
    secret "{{ shared_secret }}";
};

zone {{ object.domain }} {
        type master;
        // bind9 needs write permissions into that directory and into that file:
        file "/etc/bind/zones/{{ object.domain }}";
        update-policy {
            // these "deny" entries are needed for the service domain,
            // if you add another domain, you may want to check the need
            // for other "deny" entries if the zone is not fully available.
            // we don't allow updates to the infrastructure hosts:
            deny  {{ object.domain }}.      name      {{ object.domain }};
            deny  {{ object.domain }}.      name  www.{{ object.domain }};
            deny  {{ object.domain }}.      name ipv4.{{ object.domain }};
            deny  {{ object.domain }}.      name ipv6.{{ object.domain }};
            // but we allow updates to any other host:
            grant {{ object.domain }}. subdomain {{ object.domain }};
        };
};
{% endblock %}