In article <#4fZVi5QGHA.3916@TK2MSFTNGP11.phx.gbl>,
"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote:

> If the Secondary servers do not support Notify, you cannot have a fully
> hidden master. The SOA record will need to show the MNAME of the master
> server, and it must be able to resolve its IP address with a glue record.
> You can still have a hidden master, but the SOA record must have the name of
> the master, and you will need a record for the primary name server name. You
> do not necessarily need an NS record for the master, and you won't want to
> have the master DNS on the public record.
> http://www.dyndns.com/support/kb/arc...n_primary.html

Hi Kevin,

Thanks for the reply. This is the KB article from the provider I use:

http://esupport.gradwell.net/index.p...viewarticle&kb
articleid=35

I'm a little confused by the SOA issue.

If my provider pulls transfers from a specified IP using a script
(rather than looking at the SOA which is what I believe usually happens
with zone transfers) I don't see why the SOA would need to be the real
master?

I'm trying to understand the process a little better rather than just
filling in boxes blindly :-)

cheers,
Paul
--
paul@spamcop.net