Notes about bind
# Get the ds record dnssec-dsfromkey -2 $(grep -l key-signing *.key) # To make updates rndc -p 9530 freeze # make edits (remember to bump the serial) rndc -p 9530 thaw rndc -p 9530 reload # To send another notify rndc -p 9530 notify <zone> # Also a good way to make updates nsupdate -p 5300 -k /etc/update.key << EOF server ::1 update delete <name> <type> update add <name> <ttl> <type> <data> send EOF