<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><br><div>> Yes. and I ment ALLOW-AXFR-FROM. You can use <br>> <br>> pdnssec set-meta<br>> <br>> Command to set this value.<br><br>That is good to know, thank you.<br><br># pdnssec set-meta ALLOW-AXFR-FROM '0.0.0.0/0'<br>Unable to set meta for 'ALLOW-AXFR-FROM'<br><br>It appears that "set-meta" is not documented in the 3.4.5's pdnssec manual page, so I am not sure what to put in there.<br>Does using the pdnssec command imply that I have to configure NSSEC?<br><br>Meanwhile, I discovered that if I set:<br><br>allow-axfr-ips=0.0.0.0/0<br><br>in pdns.conf, the AXFR semantics work as in pdns_server 3.1.<br><br>This seems odd, because a recursive diff between 3.1 and 3.4.5 comes up with the following:<br><br>--- pdns-3.4.1/pdns/common_startup.cc Tue Oct 28 13:51:22 2014<br>+++ pdns-3.4.5/pdns/common_startup.cc Tue Jun 9 14:29:04 2015<br>...<br>...<br>...<br>- ::arg().set("slave-cycle-interval","Reschedule failed SOA serial checks once every .. seconds")="60";<br>+ ::arg().set("allow-notify-from","Allow AXFR NOTIFY from these IP ranges. If empty, drop all incoming notifies.")="0.0.0.0/0,::/0";<br>+ ::arg().set("slave-cycle-interval","Schedule slave freshness checks once every .. seconds")="60";<br><br></div> </div></body>
</html>