On Fri, 22 Oct 2004 13:11:16 +0200, Walkenhorst, Benjamin wrote:

> I think you problem is more like this: To be able to use TSIG-keys,
> you have to tell BIND not only about the key and what might be done
> using the key (like DDNS-Updates), but you have to create an entry
> of the following form for each machine that is to use TSIG:
> server {
> keys { kahn.tnd.lan; };
> };
> Remember that not only the key's secret but also the *name* of the key has to be the same
> on all machines that are to use it.

OK, I'll try it. kahn.tnd.lan should resolve to an IP. I use .lan for my
internal domain names. I have not had a problem with this in the past;
I'll try and change it to an IP. For now, I'm allowing updates by IP....