[Pdns-users] pdnssec set-nsec3 for all zones

Jan-Piet Mens jpmens.dns at gmail.com
Fri Feb 27 17:34:34 UTC 2015


> Is there not a way to set NSEC3 parameters (pdnssec set-nsec3) for all zones?

No, because most people chose differing NSEC3PARAMs for their zones.

        pdnssec list-all-zones | grep -v '^All zonecount:' | while read z
        do
                pdnssec set-nsec3 ...
        done

Not terribly efficient, but it may do. :)

        -JP




More information about the Pdns-users mailing list