From owner-freebsd-questions@FreeBSD.ORG  Sun Oct 22 07:29:35 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0D74116A403
	for <freebsd-questions@freebsd.org>;
	Sun, 22 Oct 2006 07:29:35 +0000 (UTC)
	(envelope-from admin2@enabled.com)
Received: from typhoon.enabled.com (typhoon.enabled.com [216.218.220.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B937443D55
	for <freebsd-questions@freebsd.org>;
	Sun, 22 Oct 2006 07:29:34 +0000 (GMT)
	(envelope-from admin2@enabled.com)
Received: from [172.24.241.11] (natint3.juniper.net [66.129.224.36])
	(authenticated bits=0)
	by typhoon.enabled.com (8.13.8/8.13.8) with ESMTP id k9M7TY6W034760
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-questions@freebsd.org>;
	Sun, 22 Oct 2006 00:29:34 -0700 (PDT)
	(envelope-from admin2@enabled.com)
Message-ID: <453B1DD2.7000807@enabled.com>
Date: Sun, 22 Oct 2006 00:29:22 -0700
From: Noah <admin2@enabled.com>
User-Agent: Thunderbird 1.5.0.7 (Macintosh/20060909)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: secure dynamic DNS
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 22 Oct 2006 07:29:35 -0000

Hi there,

I had to rebuild my gateway router which is now an ubuntu server.  I am 
trying to figure out why secure dynamic DNS is not working all that 
well.  Nothing was changed on the DNS server side, but i will include 
the configuration just in case.  Please help me figure out what I have 
misconfigured.

I am using dhclient to send updates to my DNS server.  The error message 
says the add 'forward map' is being sent to host.domain.com local IP 
address and not the address of the remove DNS server. 

And here is the dhclient error:

--- snip ---

dhclient: Unable to add forward map from host.domain.com. to 
<hosts's_local_IP_address>: timed out

--- snip ----

I dont see any message showing up in the logs on the DNS server side.

Here is the dhclient process running with all the switches:

"dhclient3 -pf /var/run/dhclient.eth1.pid -lf 
/var/lib/dhcp3/dhclient.eth1.leases eth1"

Here I provide the /etc/dhpc3/dhclient.conf configuration:

--- snip ---
send fqdn.fqdn "host.domain.com.";
send fqdn.encoded on;
send fqdn.server-update off;

key host.domain.com {
   algorithm HMAC-MD5;
   secret "<its_secret>"
};

zone domain.com {
    key "host.domain.com";
}

prepend domain-name-servers 127.0.0.1;
request subnet-mask, broadcast-address, time-offset, routers,
        domain-name, domain-name-servers, host-name,
        netbios-name-servers, netbios-scope;

---- snip ----


and from the /etc/namedb/named.conf file on DNS server side:

---- snip ---

key host.domain.com {
   algorithm HMAC-MD5;
   secret "its_secret";
};


zone "domain.com" IN {
        type master;
        file "master/domain.com";
        allow-update {
                key host.domain.com;
        };     
        allow-query { any; };
        notify yes;
};

--- snip ---

cheers,

Noah