diff --git a/content/blog/ispcp-auto-new-zone-transfer-to-secondary-dns-server/index.id.md b/content/blog/ispcp-auto-new-zone-transfer-to-secondary-dns-server/index.id.md
new file mode 100644
index 0000000..4beb8af
--- /dev/null
+++ b/content/blog/ispcp-auto-new-zone-transfer-to-secondary-dns-server/index.id.md
@@ -0,0 +1,204 @@
+---
+title: "IspCP Auto New Zone Transfer to Secondary Dns Server"
+description: Cara sinkronisasi primary DNS ispCP ke secondary DNS server.
+date: 2012-01-10T21:36:41+07:00
+lastmod:
+draft: false
+noindex: false
+featured: false
+pinned: false
+# comments: false
+series:
+#  - 
+categories:
+  - SysAdmin
+tags:
+  - IspCP
+  - Bind
+  - DNS
+  - Apache
+images:
+#  - 
+# menu:
+#   main:
+#     weight: 100
+#     params:
+#       icon:
+#         vendor: bs
+#         name: book
+#         color: '#e24d0e'
+authors:
+#  - ditatompel
+---
+
+Kali ini ane mau share cara sinkronisasi *primary DNS* **ispCP** ke *secondary DNS server*. Tapi sebelumnya, apa itu **ispCP**?
+
+<!--more-->
+
+> _**isp Control Panel (ispCP)** is an open source project founded to build a Multi Server Control and Administration Panel. This Control Panel is usable by any Internet Service Provider (ISP)._
+
+Nah [ispCP](http://isp-control.net/) sendiri mengemas aplikasi2 hosting seperti **Apache**, **Bind9**, **Courier**, **Postfix**, **ProFTP**, dan **Awstats**. dan sampai saat ini support untuk beberapa *linux distro* seperti **Debian** (**Etch**, **Lenny**, **Squeeze**), **Ubuntu**, dan **FreeBSD**.
+
+Kalau dibandingkan dengan **cPanel** secara pribadi jelas lebih nyaman cPanel. Tp krn ini open source dan gratis, worth bgt buat dicoba dan digunakan.
+
+Yuk, langsung aja... Ane asumsikan temen2 udah pada berhasil install ispCP ini.
+
+Yang diperlukan :
+
+2 buah server ( 1 untuk **primary DNS** di ispCP itu sendiri dan 1 lagi buat **secondary DNS** nya )
+
+_Tested with ispCP Version_ : `1.7` on **Debian Lenny**
+
+## ispCP server (Primary)
+
+1. Edit `/etc/ispcp/ispcp.conf` dan tambahkan *IP server secondary DNS* pada bagian **"# BIND data section".**
+2. masuk ke folder `/var/www/ispcp/gui/domain` ( buat folder tersebut jika belum ada )
+3. Buat file `index.php` dan masukan script berikut :
+
+```php
+<?php
+require '../include/ispcp-lib.php';
+ 
+$cfg = ispCP_Registry::get('Config');
+$sql = ispCP_Registry::get('Db');
+ 
+$count_query = "SELECT COUNT(`domain_id`) AS cnt FROM `domain`";
+$start_index = 0;
+$rows_per_page = 100;
+ 
+$query = "SELECT `domain_name` FROM `domain`
+    ORDER BY `domain_id` ASC
+    LIMIT $start_index, $rows_per_page";
+ 
+$rs = exec_query($sql, $count_query);
+$records_count = $rs->fields['cnt'];
+$rs = exec_query($sql, $query);
+$count_query1 = "SELECT COUNT(`alias_id`) AS cnt1 FROM `domain_aliasses`";
+$start_index1 = 0;
+$rows_per_page1 = 100;
+ 
+$query1 = "SELECT `alias_name` FROM `domain_aliasses`
+    ORDER BY `alias_id` ASC
+    LIMIT $start_index1, $rows_per_page1";
+ 
+$rs1 = exec_query($sql, $count_query1);
+ 
+$records_count1 = $rs1->fields['cnt1'];
+$rs1 = exec_query($sql, $query1);
+$all_records_count=$records_count+$records_count1;
+if ($rs->rowCount() == 0) {
+    echo "//NO DOMAINS LISTED";
+} else {
+    echo "//$all_records_count DOMAINS LISTED ON $cfg->SERVER_HOSTNAME [$cfg->BASE_SERVER_IP]\n";
+    while (!$rs->EOF){
+        echo "zone \"".$rs->fields['domain_name']."\"{\n";
+        echo "\ttype slave;\n";
+        echo "\tfile \"/var/cache/bind/".$rs->fields['domain_name'].".db\";\n";
+        echo "\tmasters { $cfg->BASE_SERVER_IP; };\n";
+        echo "\tallow-notify { $cfg->BASE_SERVER_IP; };\n";
+        echo "};\n";
+        $rs->moveNext();
+    }
+}
+ 
+if ($rs1->rowCount() == 0) {
+    echo "//END DOMAINS LIST\n";
+}
+else {
+    while (!$rs1->EOF){
+        echo "zone \"".$rs1->fields['alias_name']."\"{\n";
+        echo "\ttype slave;\n";
+        echo "\tfile \"/var/cache/bind/".$rs1->fields['alias_name'].".db\";\n";
+        echo "\tmasters { $cfg->BASE_SERVER_IP; };\n";
+        echo "\tallow-notify { $cfg->BASE_SERVER_IP; };\n";
+        echo "};\n";
+        $rs1->moveNext();
+    }
+echo "//END DOMAINS LIST\n";
+}
+?>
+```
+
+4. Buat file `.htaccess` supaya `index.php` tersebut hanya bisa diakses melalui IP secondary DNS server.
+
+```apache
+Order Deny,Allow
+Deny from all
+Allow from [IP.SECONDARY.DNS.SERVERMU]
+```
+
+5. Ubah konfigurasi `Apache AllowOverride None` menjadi `AllowOverride Limit` supaya `.htaccess` dapat berfungsi.
+
+
+```bash
+vi /etc/apache2/sites-enabled/00_master.conf
+```
+
+6. Ubah kepemilikan file pada `/var/www/ispcp/gui/domain`
+```bash
+chown vu2000:www-data -R /var/www/ispcp/gui/domain
+```
+
+7. *Generate key* untuk **secure zone transfer (TSIG)**
+
+```bash
+cd /etc/bind; dnssec-keygen -a hmac-md5 -b 128 -n HOST TRANSFER
+```
+Hasil *key* ada pada file `transfer.+[bla-bla-bla].private`. Didalamnya ada kode yang nantinya digunakan untuk sinkron *auth*. Misal : Key: `6alK9JEHMqH/ZDpFHtlstg==`
+
+Masukan kode tersebut pada konfigurasi **BIND**
+
+```bash
+vi /etc/bind/named.conf.options
+```
+
+```bind
+//
+//SECONDARY NS
+//
+key "TRANSFER" {
+    algorithm hmac-md5;
+    secret "6alK9JEHMqH/ZDpFHtlstg==";
+};
+server [IP.SECONDARY.DNS.SERVERMU] {
+    keys {
+        TRANSFER;
+    };
+};
+```
+
+Konfigurasi pada *primary DNS server* sudah selesai. Lalu kita masuk ke tahap berikutnya, yaitu :
+
+## konfigurasi pada secondary DNS server
+> _Saya asumsikan BIND sudah terinstall di server Secondary DNS ini._
+
+1. Edit konfiurasi BIND (`/etc/bind/named.conf`) dan tambahkan `include "/etc/bind/named.conf.backup"`.
+2. Buat keys zone transfer
+```bash
+vi /etc/bind/named.conf.options
+```
+dan tambahkan konfigurasi berikut :
+```bind
+//
+//SECONDARY NS
+//
+key "TRANSFER" {
+    algorithm hmac-md5;
+    secret "6alK9JEHMqH/ZDpFHtlstg==";
+};
+server [IP.ISPCP.SERVER] {
+    keys {
+        TRANSFER;
+    };
+};
+```
+
+3. Buat script untuk cronjob: `vi /etc/cron.d/dnsupdate`
+dan tambahkan :
+```
+* */12 * * * root      /usr/bin/wget http://[IP.ISPCP.SERVER]/domain/ -O /etc/bind/named.conf.backup && /etc/init.d/bind9 reload
+```
+4. Terakhir, coba reload cronjob untuk memastikan trik kita sukses.
+```bash
+/etc/init.d/cron reload
+```
\ No newline at end of file