discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] Setting up the master records for an opennic domain

From: Erich Eckner <opennic AT eckner.net>
To: discuss AT lists.opennicproject.org
Subject: Re: [opennic-discuss] Setting up the master records for an opennic domain
Date: Thu, 4 Mar 2021 07:09:25 +0100 (CET)
Original-from: Erich Eckner <opennic AT eckner.net>
Original-subject: Re: [opennic-discuss] Setting up the master records for an opennic domain

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Pete,

On Wed, 3 Mar 2021, Pete Kelly wrote:

Let me rephrase my situation:

I have reason to believe that the answers to my ramblings below are going to
include these terms:

allow-transfer
allow-notify
and
key

This would mean, the opennic dns servers (be it tier 1 or 2) are also authoritative for your domain - which in fact they are not.

What you should really do is, *either*:

1. publish your dns records with opennic (depending on the tld, there may be an api to automate this)

*or*

2. pubhlish NS and glue A/AAAA records pointing at your nameserver in the next-higher opennic domain and set up your dns server as authoritative for these domains.

I have both setups running: For 1 check acme.libre., for 2 check archlinux32.oss.

I figure that my master and _some_ slave are going to need to exchange keys
- how does that occur?

I'm not aware, that any opennic server can pull your zone via AXFR/IXFR from your dns server. Maybe you're looking for a service like buddyns or freedns instead/complementary?

https://www.buddyns.com/
https://freedns.afraid.org/

Both services do not exchange keys, but rather restrict access by ip address.

Thanks,
Pete

regards, Erich

On 2/27/21 2:08 PM, Pete Kelly wrote:
Greetings:

There is (at least) a step that I don't understand and that is
how I get a domain that I have the master DNS record for pushed
out to the tier 2 DNS servers. Maybe it is just my
understanding of how this works that is the problem.

I have registered a new domain and I installed and configured a
DNS server and created a master record for that domain. My
server responds correctly to queries but I'm thinking that I
need to notify the next level up that I have a new record for
them to serve. How does that happen?

Thanks,
Pete

--------
You are a member of the OpenNIC Discuss list. You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org

Re: [opennic-discuss] Setting up the master records for an opennic domain, Pete Kelly, 03/03/2021
- Re: [opennic-discuss] Setting up the master records for an opennic domain, Erich Eckner, 03/04/2021