[dns-operations] DNSSEC and Split DNS?
lutz at iks-jena.de
Sun Aug 31 20:16:23 UTC 2008
* Edward Lewis wrote:
> The one problem with DNSSEC and split-DNS that has not been solved is
> "how does one deploy DNSSEC on the outside and not on the inside?"
> (A topic for another thread.)
That's easy. I run a Windows DNS inside a customer lan, use AXFR to transfer
the zone to signing server (filter it before signing) and axfr the zone back
to the outside DNS.
More information about the dns-operations