></DT
><DT
>4.4. <A
-HREF="Bv9ARM.ch04.html#AEN734"
+HREF="Bv9ARM.ch04.html#AEN753"
>Split DNS</A
></DT
><DT
></DT
><DT
>4.6. <A
-HREF="Bv9ARM.ch04.html#AEN894"
+HREF="Bv9ARM.ch04.html#AEN913"
>TKEY</A
></DT
><DT
>4.7. <A
-HREF="Bv9ARM.ch04.html#AEN909"
+HREF="Bv9ARM.ch04.html#AEN928"
>SIG(0)</A
></DT
><DT
></DT
><DT
>4.9. <A
-HREF="Bv9ARM.ch04.html#AEN994"
+HREF="Bv9ARM.ch04.html#AEN1013"
>IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
>.</P
><P
>If you have to make changes to a dynamic zone
- manually, the following procedure will work: Shut down
- the server using <B
-CLASS="command"
->rndc stop</B
-> (sending a signal
- or using <B
+ manually, the following procedure will work: Disable dynamic updates
+ to the zone using
+ <B
CLASS="command"
->rndc halt</B
-> is <I
-CLASS="emphasis"
->not</I
->
- sufficient). Wait for the server to exit,
- then <I
-CLASS="emphasis"
->remove</I
-> the zone's
- <TT
-CLASS="filename"
->.jnl</TT
-> file, edit the zone file,
- and restart the server. Removing the <TT
+>rndc freeze <TT
+CLASS="replaceable"
+><I
+>zone</I
+></TT
+></B
+>.
+ This will also remove the zone's <TT
CLASS="filename"
>.jnl</TT
+> file
+ and update the master file. Edit the zone file. Run
+ <B
+CLASS="command"
+>rndc unfreeze <TT
+CLASS="replaceable"
+><I
+>zone</I
+></TT
+></B
>
- file is necessary because the manual edits will not be
- present in the journal, rendering it inconsistent with the
- contents of the zone file.</P
+ to reload the changed zone and re-enable dynamic updates.</P
></DIV
></DIV
><DIV
><H1
CLASS="sect1"
><A
-NAME="AEN734"
+NAME="AEN753"
>4.4. Split DNS</A
></H1
><P
><H2
CLASS="sect2"
><A
-NAME="AEN825"
+NAME="AEN844"
>4.5.1. Generate Shared Keys for Each Pair of Hosts</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN830"
+NAME="AEN849"
>4.5.1.1. Automatic Generation</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN841"
+NAME="AEN860"
>4.5.1.2. Manual Generation</A
></H3
><P
><H2
CLASS="sect2"
><A
-NAME="AEN846"
+NAME="AEN865"
>4.5.2. Copying the Shared Secret to Both Machines</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN849"
+NAME="AEN868"
>4.5.3. Informing the Servers of the Key's Existence</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN861"
+NAME="AEN880"
>4.5.4. Instructing the Server to Use the Key</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN877"
+NAME="AEN896"
>4.5.5. TSIG Key Based Access Control</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN890"
+NAME="AEN909"
>4.5.6. Errors</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN894"
+NAME="AEN913"
>4.6. TKEY</A
></H1
><P
><H1
CLASS="sect1"
><A
-NAME="AEN909"
+NAME="AEN928"
>4.7. SIG(0)</A
></H1
><P
><H2
CLASS="sect2"
><A
-NAME="AEN926"
+NAME="AEN945"
>4.8.1. Generating Keys</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN946"
+NAME="AEN965"
>4.8.2. Creating a Keyset</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN958"
+NAME="AEN977"
>4.8.3. Signing the Child's Keyset</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN971"
+NAME="AEN990"
>4.8.4. Signing the Zone</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN987"
+NAME="AEN1006"
>4.8.5. Configuring Servers</A
></H2
><P
><H1
CLASS="sect1"
><A
-NAME="AEN994"
+NAME="AEN1013"
>4.9. IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
><H2
CLASS="sect2"
><A
-NAME="AEN1011"
+NAME="AEN1030"
>4.9.1. Address Lookups Using AAAA Records</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1016"
+NAME="AEN1035"
>4.9.2. Address Lookups Using A6 Records</A
></H2
><P
><H3
CLASS="sect3"
><A
-NAME="AEN1020"
+NAME="AEN1039"
>4.9.2.1. A6 Chains</A
></H3
><P
><H3
CLASS="sect3"
><A
-NAME="AEN1031"
+NAME="AEN1050"
>4.9.2.2. A6 Records for DNS Servers</A
></H3
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1037"
+NAME="AEN1056"
>4.9.3. Address to Name Lookups Using Nibble Format</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1044"
+NAME="AEN1063"
>4.9.4. Address to Name Lookups Using Binary Label Format</A
></H2
><P
><H2
CLASS="sect2"
><A
-NAME="AEN1051"
+NAME="AEN1070"
>4.9.5. Using DNAME for Delegation of IPv6 Reverse Addresses</A
></H2
><P
></DT
><DT
>3.3.2. <A
-HREF="Bv9ARM.ch03.html#AEN655"
+HREF="Bv9ARM.ch03.html#AEN675"
>Signals</A
></DT
></DL
></DT
><DT
>4.4. <A
-HREF="Bv9ARM.ch04.html#AEN734"
+HREF="Bv9ARM.ch04.html#AEN753"
>Split DNS</A
></DT
><DT
><DL
><DT
>4.5.1. <A
-HREF="Bv9ARM.ch04.html#AEN825"
+HREF="Bv9ARM.ch04.html#AEN844"
>Generate Shared Keys for Each Pair of Hosts</A
></DT
><DT
>4.5.2. <A
-HREF="Bv9ARM.ch04.html#AEN846"
+HREF="Bv9ARM.ch04.html#AEN865"
>Copying the Shared Secret to Both Machines</A
></DT
><DT
>4.5.3. <A
-HREF="Bv9ARM.ch04.html#AEN849"
+HREF="Bv9ARM.ch04.html#AEN868"
>Informing the Servers of the Key's Existence</A
></DT
><DT
>4.5.4. <A
-HREF="Bv9ARM.ch04.html#AEN861"
+HREF="Bv9ARM.ch04.html#AEN880"
>Instructing the Server to Use the Key</A
></DT
><DT
>4.5.5. <A
-HREF="Bv9ARM.ch04.html#AEN877"
+HREF="Bv9ARM.ch04.html#AEN896"
>TSIG Key Based Access Control</A
></DT
><DT
>4.5.6. <A
-HREF="Bv9ARM.ch04.html#AEN890"
+HREF="Bv9ARM.ch04.html#AEN909"
>Errors</A
></DT
></DL
></DD
><DT
>4.6. <A
-HREF="Bv9ARM.ch04.html#AEN894"
+HREF="Bv9ARM.ch04.html#AEN913"
>TKEY</A
></DT
><DT
>4.7. <A
-HREF="Bv9ARM.ch04.html#AEN909"
+HREF="Bv9ARM.ch04.html#AEN928"
>SIG(0)</A
></DT
><DT
><DL
><DT
>4.8.1. <A
-HREF="Bv9ARM.ch04.html#AEN926"
+HREF="Bv9ARM.ch04.html#AEN945"
>Generating Keys</A
></DT
><DT
>4.8.2. <A
-HREF="Bv9ARM.ch04.html#AEN946"
+HREF="Bv9ARM.ch04.html#AEN965"
>Creating a Keyset</A
></DT
><DT
>4.8.3. <A
-HREF="Bv9ARM.ch04.html#AEN958"
+HREF="Bv9ARM.ch04.html#AEN977"
>Signing the Child's Keyset</A
></DT
><DT
>4.8.4. <A
-HREF="Bv9ARM.ch04.html#AEN971"
+HREF="Bv9ARM.ch04.html#AEN990"
>Signing the Zone</A
></DT
><DT
>4.8.5. <A
-HREF="Bv9ARM.ch04.html#AEN987"
+HREF="Bv9ARM.ch04.html#AEN1006"
>Configuring Servers</A
></DT
></DL
></DD
><DT
>4.9. <A
-HREF="Bv9ARM.ch04.html#AEN994"
+HREF="Bv9ARM.ch04.html#AEN1013"
>IPv6 Support in <SPAN
CLASS="acronym"
>BIND</SPAN
><DL
><DT
>4.9.1. <A
-HREF="Bv9ARM.ch04.html#AEN1011"
+HREF="Bv9ARM.ch04.html#AEN1030"
>Address Lookups Using AAAA Records</A
></DT
><DT
>4.9.2. <A
-HREF="Bv9ARM.ch04.html#AEN1016"
+HREF="Bv9ARM.ch04.html#AEN1035"
>Address Lookups Using A6 Records</A
></DT
><DT
>4.9.3. <A
-HREF="Bv9ARM.ch04.html#AEN1037"
+HREF="Bv9ARM.ch04.html#AEN1056"
>Address to Name Lookups Using Nibble Format</A
></DT
><DT
>4.9.4. <A
-HREF="Bv9ARM.ch04.html#AEN1044"
+HREF="Bv9ARM.ch04.html#AEN1063"
>Address to Name Lookups Using Binary Label Format</A
></DT
><DT
>4.9.5. <A
-HREF="Bv9ARM.ch04.html#AEN1051"
+HREF="Bv9ARM.ch04.html#AEN1070"
>Using DNAME for Delegation of IPv6 Reverse Addresses</A
></DT
></DL
><DL
><DT
>5.1. <A
-HREF="Bv9ARM.ch05.html#AEN1071"
+HREF="Bv9ARM.ch05.html#AEN1090"
>The Lightweight Resolver Library</A
></DT
><DT
></DT
><DT
>6.1.2. <A
-HREF="Bv9ARM.ch06.html#AEN1314"
+HREF="Bv9ARM.ch06.html#AEN1333"
>Comment Syntax</A
></DT
></DL
><DL
><DT
>6.2.1. <A
-HREF="Bv9ARM.ch06.html#AEN1421"
+HREF="Bv9ARM.ch06.html#AEN1440"
><B
CLASS="command"
>acl</B
></DT
><DT
>6.2.3. <A
-HREF="Bv9ARM.ch06.html#AEN1468"
+HREF="Bv9ARM.ch06.html#AEN1487"
><B
CLASS="command"
>controls</B
></DT
><DT
>6.2.5. <A
-HREF="Bv9ARM.ch06.html#AEN1547"
+HREF="Bv9ARM.ch06.html#AEN1566"
><B
CLASS="command"
>include</B
></DT
><DT
>6.2.6. <A
-HREF="Bv9ARM.ch06.html#AEN1552"
+HREF="Bv9ARM.ch06.html#AEN1571"
><B
CLASS="command"
>include</B
></DT
><DT
>6.2.7. <A
-HREF="Bv9ARM.ch06.html#AEN1559"
+HREF="Bv9ARM.ch06.html#AEN1578"
><B
CLASS="command"
>key</B
></DT
><DT
>6.2.8. <A
-HREF="Bv9ARM.ch06.html#AEN1566"
+HREF="Bv9ARM.ch06.html#AEN1585"
><B
CLASS="command"
>key</B
></DT
><DT
>6.2.9. <A
-HREF="Bv9ARM.ch06.html#AEN1586"
+HREF="Bv9ARM.ch06.html#AEN1605"
><B
CLASS="command"
>logging</B
></DT
><DT
>6.2.10. <A
-HREF="Bv9ARM.ch06.html#AEN1626"
+HREF="Bv9ARM.ch06.html#AEN1645"
><B
CLASS="command"
>logging</B
></DT
><DT
>6.2.11. <A
-HREF="Bv9ARM.ch06.html#AEN1857"
+HREF="Bv9ARM.ch06.html#AEN1876"
><B
CLASS="command"
>lwres</B
></DT
><DT
>6.2.12. <A
-HREF="Bv9ARM.ch06.html#AEN1881"
+HREF="Bv9ARM.ch06.html#AEN1900"
><B
CLASS="command"
>lwres</B
></DT
><DT
>6.2.13. <A
-HREF="Bv9ARM.ch06.html#AEN1900"
+HREF="Bv9ARM.ch06.html#AEN1919"
><B
CLASS="command"
>options</B
></DT
><DT
>6.2.17. <A
-HREF="Bv9ARM.ch06.html#AEN3179"
+HREF="Bv9ARM.ch06.html#AEN3198"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.18. <A
-HREF="Bv9ARM.ch06.html#AEN3195"
+HREF="Bv9ARM.ch06.html#AEN3214"
><B
CLASS="command"
>trusted-keys</B
></DT
><DT
>6.2.20. <A
-HREF="Bv9ARM.ch06.html#AEN3217"
+HREF="Bv9ARM.ch06.html#AEN3236"
><B
CLASS="command"
>view</B
></DT
><DT
>6.2.22. <A
-HREF="Bv9ARM.ch06.html#AEN3374"
+HREF="Bv9ARM.ch06.html#AEN3393"
><B
CLASS="command"
>zone</B
></DD
><DT
>6.3. <A
-HREF="Bv9ARM.ch06.html#AEN3719"
+HREF="Bv9ARM.ch06.html#AEN3738"
>Zone File</A
></DT
><DD
></DT
><DT
>6.3.2. <A
-HREF="Bv9ARM.ch06.html#AEN4034"
+HREF="Bv9ARM.ch06.html#AEN4053"
>Discussion of MX Records</A
></DT
><DT
></DT
><DT
>6.3.4. <A
-HREF="Bv9ARM.ch06.html#AEN4155"
+HREF="Bv9ARM.ch06.html#AEN4174"
>Inverse Mapping in IPv4</A
></DT
><DT
>6.3.5. <A
-HREF="Bv9ARM.ch06.html#AEN4182"
+HREF="Bv9ARM.ch06.html#AEN4201"
>Other Zone File Directives</A
></DT
><DT
>6.3.6. <A
-HREF="Bv9ARM.ch06.html#AEN4240"
+HREF="Bv9ARM.ch06.html#AEN4259"
><SPAN
CLASS="acronym"
>BIND</SPAN
></DT
><DT
>7.2. <A
-HREF="Bv9ARM.ch07.html#AEN4332"
+HREF="Bv9ARM.ch07.html#AEN4351"
><B
CLASS="command"
>chroot</B
><DL
><DT
>7.2.1. <A
-HREF="Bv9ARM.ch07.html#AEN4355"
+HREF="Bv9ARM.ch07.html#AEN4374"
>The <B
CLASS="command"
>chroot</B
></DT
><DT
>7.2.2. <A
-HREF="Bv9ARM.ch07.html#AEN4373"
+HREF="Bv9ARM.ch07.html#AEN4392"
>Using the <B
CLASS="command"
>setuid</B
><DL
><DT
>8.1. <A
-HREF="Bv9ARM.ch08.html#AEN4394"
+HREF="Bv9ARM.ch08.html#AEN4413"
>Common Problems</A
></DT
><DD
><DL
><DT
>8.1.1. <A
-HREF="Bv9ARM.ch08.html#AEN4396"
+HREF="Bv9ARM.ch08.html#AEN4415"
>It's not working; how can I figure out what's wrong?</A
></DT
></DL
></DD
><DT
>8.2. <A
-HREF="Bv9ARM.ch08.html#AEN4399"
+HREF="Bv9ARM.ch08.html#AEN4418"
>Incrementing and Changing the Serial Number</A
></DT
><DT
>8.3. <A
-HREF="Bv9ARM.ch08.html#AEN4404"
+HREF="Bv9ARM.ch08.html#AEN4423"
>Where Can I Get Help?</A
></DT
></DL
><DL
><DT
>A.1. <A
-HREF="Bv9ARM.ch09.html#AEN4420"
+HREF="Bv9ARM.ch09.html#AEN4439"
>Acknowledgements</A
></DT
><DD
><DL
><DT
>A.1.1. <A
-HREF="Bv9ARM.ch09.html#AEN4422"
+HREF="Bv9ARM.ch09.html#AEN4441"
>A Brief History of the <SPAN
CLASS="acronym"
>DNS</SPAN
></DT
><DT
>A.3.3. <A
-HREF="Bv9ARM.ch09.html#AEN5056"
+HREF="Bv9ARM.ch09.html#AEN5075"
>Other Documents About <SPAN
CLASS="acronym"
>BIND</SPAN