[Systems] [support.osuosl.org #10742] sugarlabs.org nameservers

[Brian Henderson via RT]

On Thu Jan 14 22:43:39 2010, bernie at codewiz.org wrote:
> On Wed, 2010-01-13 at 18:31 +0000, Brian Henderson via RT wrote:
> > On Fri Jan 08 08:34:29 2010, bernie at codewiz.org wrote:
> > > Please, add our new master DNS to the list of allowed masters:
> > > 
> > >   ns1.sugarlabs.org  (140.186.70.102, 2002:8cba:4666::1)
> > > 
> > > Also, it looks like one of the domains somosazucar.org and
> > > somosazucar.net isn't configured in the osuosl auth nameservers.
> > 
> > I've added somosazucar.net to the osuosl nameservers, but I'm not sure
> > what you mean by 'the list of allowed masters'.
> 
> How do the osuosl slave nameservers check authorization to update the
> zone?
> 
> Often, the slaves configuration specifies the list of IPs which are
> allowed to send  notifies and perform zone transfers. We're moving our
> master nameserver to ns1.sugarlabs.net, so I thought it's necessary to
> add its IP (140.186.70.102, 2002:8cba:4666::1) to this list.
> 
> It would probably be safer and more flexible if we could instead switch
> to use a symmetric key (or even dnssec, if we can make sense of it). But
> this would require some experimentation on our side.
> 

Our servers pull your zones periodically from 83.149.158.210, rather
than you pushing/triggering it.

If you'd like us to pull from the new server, just say the word and we
can change it.

-- 
Brian Henderson
OSU Open Source Lab