[dns-operations] DNSSEC and Split DNS?

Lutz Donnerhacke lutz at iks-jena.de
Sun Aug 31 20:16:23 UTC 2008

* Edward Lewis wrote:
> The one problem with DNSSEC and split-DNS that has not been solved is 
> "how does one deploy DNSSEC on the outside and not on the inside?" 
> (A topic for another thread.)

That's easy. I run a Windows DNS inside a customer lan, use AXFR to transfer
the zone to signing server (filter it before signing) and axfr the zone back
to the outside DNS.

More information about the dns-operations mailing list