<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: WRT54GL: OpenWRT Kamikaze 0.9 and dynamic DNS (nsupdate/bind)</title>
	<atom:link href="http://ghantoos.org/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/feed/" rel="self" type="application/rss+xml" />
	<link>http://ghantoos.org/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/</link>
	<description>ghantoos.org</description>
	<lastBuildDate>Mon, 27 Feb 2012 08:36:40 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Ignace Mouzannar</title>
		<link>http://ghantoos.org/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/comment-page-1/#comment-32</link>
		<dc:creator>Ignace Mouzannar</dc:creator>
		<pubDate>Tue, 18 Dec 2007 16:26:21 +0000</pubDate>
		<guid isPermaLink="false">http://ghantoos.org/index.php/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/#comment-32</guid>
		<description>Thanks for your comment Dean!

I&#039;m going to try this out. Sure looks great!

Although, the real space saver would be to have a tiny libopenssl which is the hugh package needed.: )

I am going to try another type of solution (e.g. through restricted ssh access on the DNS server, with only nsupdate command allowed) so I don&#039;t have to install nsupdate &amp; libopenssl on the wrt54gl.

I&#039;ll keep you posted,

Cheers,

Ghantoos

PS: I just added the &quot;subscribe to comment&quot; so you can choose to receive an email when a reply is posted.</description>
		<content:encoded><![CDATA[<p>Thanks for your comment Dean!</p>
<p>I&#8217;m going to try this out. Sure looks great!</p>
<p>Although, the real space saver would be to have a tiny libopenssl which is the hugh package needed.: )</p>
<p>I am going to try another type of solution (e.g. through restricted ssh access on the DNS server, with only nsupdate command allowed) so I don&#8217;t have to install nsupdate &#038; libopenssl on the wrt54gl.</p>
<p>I&#8217;ll keep you posted,</p>
<p>Cheers,</p>
<p>Ghantoos</p>
<p>PS: I just added the &#8220;subscribe to comment&#8221; so you can choose to receive an email when a reply is posted.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dean</title>
		<link>http://ghantoos.org/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/comment-page-1/#comment-16</link>
		<dc:creator>Dean</dc:creator>
		<pubDate>Fri, 14 Dec 2007 12:10:52 +0000</pubDate>
		<guid isPermaLink="false">http://ghantoos.org/index.php/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/#comment-16</guid>
		<description>Oops: probably should have mentioned it&#039;s at http://dudders.sourceforge.net</description>
		<content:encoded><![CDATA[<p>Oops: probably should have mentioned it&#8217;s at <a href="http://dudders.sourceforge.net" rel="nofollow">http://dudders.sourceforge.net</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dean</title>
		<link>http://ghantoos.org/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/comment-page-1/#comment-15</link>
		<dc:creator>Dean</dc:creator>
		<pubDate>Fri, 14 Dec 2007 12:09:11 +0000</pubDate>
		<guid isPermaLink="false">http://ghantoos.org/index.php/2007/11/29/wrt54gl-openwrt-kamikaze-09-and-dynamic-dns-nsupdatebind/#comment-15</guid>
		<description>I just wrote a small utility that&#039;s an nsupdate replacement for this particular use case:   It&#039;s considerably smaller than nsupdate; although it still needs a crypto library: openssl or gcrypt can be specified at compile time.  It only does public key SIG(0) updates (public keys for all, yay).  There&#039;s another one I haven&#039;t tried: http://ipupdate.sourceforge.net/ which does TSIG.

An orthogonal issue is that you can incorporate a hotplug script that will get called when PPP is brought up instead of a cronjob.  There&#039;s also a slightly more accurate (in my opinion) hereustic for determining the IP: by route instead of &quot;whatever isn&#039;t localhost&quot;.  See the dudders .ipk although it would work for nsupdate too.</description>
		<content:encoded><![CDATA[<p>I just wrote a small utility that&#8217;s an nsupdate replacement for this particular use case:   It&#8217;s considerably smaller than nsupdate; although it still needs a crypto library: openssl or gcrypt can be specified at compile time.  It only does public key SIG(0) updates (public keys for all, yay).  There&#8217;s another one I haven&#8217;t tried: <a href="http://ipupdate.sourceforge.net/" rel="nofollow">http://ipupdate.sourceforge.net/</a> which does TSIG.</p>
<p>An orthogonal issue is that you can incorporate a hotplug script that will get called when PPP is brought up instead of a cronjob.  There&#8217;s also a slightly more accurate (in my opinion) hereustic for determining the IP: by route instead of &#8220;whatever isn&#8217;t localhost&#8221;.  See the dudders .ipk although it would work for nsupdate too.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

