Comments on: Blocking verisign DNS wildcards

By: Komeylian

Komeylian — Tue, 11 May 2004 10:43:41 +0000

Dear sir

I have some problem by rndc-confgen .

I use rndc-confgen -a -c /usr/local/etc/rndc.key to give key but unfortunatly it give more than 10 minutes and donot send any report .

By: Rob Yelvington

Rob Yelvington — Tue, 25 Nov 2003 23:02:29 +0000

We should add that in case you can’t generate a key file because of the following error:

rndc-confgen: generate key: not enough entropy

Add the command line option “-r /dev/urandom” to the rndc-confgen to tell it to use /dev/urandom.

Excellent article!

By: The Lost Olive

The Lost Olive — Fri, 26 Sep 2003 13:35:22 +0000

Blocking verisign DNS wildcards

Geek Style: Blocking verisign DNS wildcards I am happily running BIND 9.2.3rc4 on four DNS servers around the world, blocking DNS wildcards on .net and .com zones. delegation-only feature worked fine out of the box. The only tricky part of the process …