BIND DNS: Disable Dynamic Updates

BIND9 dynamic updates allow remote servers to add, delete, or modify any entries in my zone file. How do I disable dynamic updates under BIND 9 (named) for any zone?

Dynamic updates can be risky, and disabling them is recommended. Another solution is to limit dynamic updates using ACLs and TSIG keys.

Linux / UNIX named Disable Dynamic Updates

Edit named.conf, run:
# vi named.conf
For each domain zone, set allow-update to none:

zone "cyberciti.com" IN {
  ....
  allow-update { none; };
  ...
}

Posted by: SXI ADMIN

The author is the creator of SXI LLC and a seasoned sysadmin, DevOps engineer, and a trainer for the Linux operating system/Unix shell scripting. Get the latest tutorials on SysAdmin, Linux/Unix and open source topics via RSS/XML feed or weekly email newsletter.