migration-4to9 revision 39f1df3fbd71b6d57c31f6a1b3d7e5194ef63fcc
fb84f9014321c5f33c4682de5661b579fcde318fAndreas GustafssonCopyright (C) 2000, 2001 Internet Software Consortium.
de283bda6a902c2102a795192eeab3a769001c7dTinderbox UserSee COPYRIGHT in the source root or http://isc.org/copyright.html for terms.
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein BIND 4 to BIND 9 Migration Notes
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater
fb84f9014321c5f33c4682de5661b579fcde318fAndreas GustafssonTo transition from BIND 4 to BIND 9 you first need to convert your
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafssonconfiguration file to the new format. There is a conversion tool in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeincontrib/named-bootconf that allows you to do this.
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews named-bootconf.sh < /etc/named.boot > /etc/named.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
af5073d03288a53b646ec3b807ac25ced64d7879Mark AndrewsBIND 9 uses a system assigned port for the UDP queries it makes rather
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrewsthan port 53 that BIND 4 uses. This may conflict with some firewalls.
af5073d03288a53b646ec3b807ac25ced64d7879Mark AndrewsThe following directives in /etc/named.conf allows you to specify
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrewsa port to use.
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafsson
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein query-source address * port 53;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfer-source * port 53;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein notify-source * port 53;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserBIND 9 no longer uses the minimum field to specify the TTL of records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinwithout a explicit TTL. Use the $TTL directive to specify a default TTL
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox Userbefore the first record without a explicit TTL.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User $TTL 3600
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein @ IN SOA ns1.example.com. hostmaster.example.com. (
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User 2001021100
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 7200
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User 1200
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 3600000
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User 7200 )
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserBIND 9 does not support multiple CNAMEs with the same owner name.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User Illegal:
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User www.example.com. CNAME host1.example.com.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User www.example.com. CNAME host2.example.com.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinBIND 9 does not support "CNAMEs with other data" with the same owner name,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinignoring the DNSSEC records (SIG, NXT, KEY) that BIND 4 did not support.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Illegal:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein www.example.com. CNAME host1.example.com.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User www.example.com. MX 10 host2.example.com.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox UserBIND 9 is less tolerant of errors in master files, so check your logs and
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox Userfix any errors reported. The named-checkzone program can also be to check
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinmaster files.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein