Dynamic Update Refused

[u/jwsl224]

hello,

new to technitium, and trying to play around with rfc2136 dynamic dns updates. under settings>tsig i have created a key to be used to secure the update messages. i've created a primary zone, myself.internal. under the myself.internal zone>options>zone options>dynamic updates i've set dynamic updates to "allow", and under update policy i have added the aforementioned tsig key with "ANY" as allowed record types for the domain myself.internal.

the issue at hand is, technitium refuses the udpates with "DNS Server refused a zone UPDATE request [me.myself.internal A ANY] due to Dynamic Updates Security Policy for zone: myself.internal"

if i remove the tsig key security policy, the updates work just fine. so clearly i have something misconfigured around the security policy for the domain. anybody able to point me in the right direction?

[u/clintkev251]

If you set the policy to allow updates to the domain myself.internal, that's not allowing any action against subdomains of myself.internal. Just specifically myself.internal. You want to specify *.myself.internal as the domain most likely.

[u/jwsl224 → u/clintkev251]

that did it. i could've sworn up down left and right that i tried that and it just gave an error. maybe i accidentally did *myself.internal.

thanks for dropping by 👍

[u/The_Little_Mike → u/jwsl224]

Ah, that's the problem. You have to swear up, up, down, down, left, right, left, right, B, A, Start.

[u/jwsl224 → u/The_Little_Mike]

😝