Editing zone options on Microsoft and BIND - User Guide - BlueCat Horizon

To edit zone options for Microsoft DNS zones:

1. In the DNS list, select the zone(s) for which you want to edit options.
2. Use either the Action or ellipses in the row to select Edit zone options.
3. In the dialog, edit the zone options as needed:
   
   
   • Dynamic zone (primary): Select the checkbox to enable the zone to allow dynamic DNS updates to their resource records.
   • Allow insecure updates (Only on Active Directory integrated zones): Enable or disable insecure updates for the zone. When enabled, any client can update DNS records without authentication, potentially introducing security risks.
   • Update notifications (On primary, secondary, or Active Directory integrated zones): Specify which servers should be notified when changes are made to the zone's DNS records. Options include:
     • None
     • Servers listed in the zone
     • Specified servers only — If selected, enter the IP addresses of the servers that should be notified.
   • Zone transfers (On primary, secondary, or Active Directory integrated zones): Specify servers are allowed to receive zone transfers. Options include:
     • None
     • To any server
     • To servers listed in the zone
     • To specified servers only — If selected, enter the IP addresses of the servers allowed to receive zone transfers.
   • Forward servers (Only on forward zones): Specify the servers to which queries should be forwarded.
   • Primary servers (Only on stub zones): Specify the primary servers for the stub zone.
4. Select Save.

To edit zone options for BIND DNS zones:

1. In the DNS list, select the zone(s) for which you want to edit options.
2. Use either the Action or ellipses in the row to select Edit zone options.
3. In the dialog, edit the zone options as needed:
   
   
   • Show inherited options: This option is selected by default. When selected, any inherited options that are applied to the selected zone are displayed. Inherited options are settings that are propogated from higher-level configurations, either the server or view. You can edit the inherited options by selecting + Override or by selecting the specific option you want to modify from the dropdown.

     To add another entry, select + Add for the relevant option.

     • Query restrictions (On primary, secondary, stub, and static-stub zones): Specify which hosts or IP addresses are allowed to query the DNS zone.
     • Transfer restrictions (On primary and secondary zones): Specify which IP addresses or hosts are permitted to request zone transfers.
     • Update restrictions (On primary zones only): Specify who is allowed to dynamically update the DNS records within the zone.
     • Update notifications (On primary and secondary zones): Specify which servers should receive notifications when changes are made to the zone's DNS records. When dynamic updates occur, the specified servers receive notifications to ensure they can synchronize their records accordingly.
     • Response policy (On primary and secondary zones): Specify whether the zone is a response policy zone.
     • Query forwarding (On forward zones): Select how BIND behaves when forwarding queries for the forward zone.
       • First - resolve if forwarding fails provides a fallback to local resolution if forwarding fails.
       • Only - fail if forwarding fails strictly relies on forwarding and does not attempt local resolution if forwarding fails.
4. Select Save.

Editing the raw configuration of BIND zone options

The Raw configuration tab of the Edit zone options dialog enables experienced users, who have a good understanding of DNS configurations, to modify raw configuration files directly. This provides you control over BIND server zone options that are not available in the Web Application.