[BlueOnyx:27011] Re: Exporting and Importing Secondary Mail Server Records

[Michael Stauber (mobile)]

Hi Richard,

> Is there a way, by means of a script or a manual operation, that I can 
> export the secondary mail server records and import them on a new server?
> 
> Source server: build 20140909 for a 5208R in en_US
> 
> Destination server: build 20240222 for a 5211R in en_US
> 
> The source server is long overdue a rebuild and I cannot get 
> easy-migrate.pl working because of out-of-date cyphers (I don’t actually 
> know if easy-migrate.pl will do what I need anyway).

Yeah, Easy-Migrate has an option to migrate DNS. Which includes 2ndary 
DNS, too:

https://www.blueonyx.it/easy-migrate

The command to migrate just DNS would be similar to this:

/usr/sausalito/sbin/easy-migrate.pl --source <IP-of-Source-Server> -p 22 
--dnsonly

As for outdated SSH ciphers? The work around for that is explained on 
the Easy-Migrate page linked above:

---------------------------------------------------------------------------
5211R (EL9) uses a more modern SSH and some older ciphers have been 
deprecated. This is no issue if you're trying to import from BlueOnyx 
5210R or BlueOnyx 5209R. But if you still have a BlueOnyx 5207R or 5208R 
and want to Easy-Migrate straight to BlueOnyx 5211R? In that case you 
need to create the file /root/.ssh/config on your BlueOnyx 5211R and add 
the following text into it to allow user "root" to use older 
HostKeyAlgorithms and key-types:

HostKeyAlgorithms +ssh-rsa,ssh-dss
PubkeyAcceptedKeyTypes +ssh-rsa,ssh-dss
---------------------------------------------------------------------------

Other than that? There are some old scripts on each BlueOnyx that allow 
you to export/import just the slave-zones:

Export DNS-Slave zones: /usr/sausalito/sbin/dns-slavezones.pl

That dumps the zones on the screen. Copy and paste them to the new 
server where you want to import. Save the dump there as 
/usr/sausalito/sbin/slaves.txt

Then run this script /usr/sausalito/sbin/dns-import-slavezones.pl and it 
ought to import it.

-- 
With best regards

Michael Stauber