From http://db.debian.org/doc-mail.html ...

Debian.net DNS Zone Entry. The only way to get a debian.net address is to use the mail gateway. It will verify the request and prevent name collisions automatically. Requests can take two forms: 'foo in a 1.2.3.4' or 'foo in cname foo.bar.' The precise form is critical and must not be deviated from. Like the SSH function above, multiple hosts are supported, but they must all be sent at once.

So...to get an A record for 'foo' that points to '10.11.12.13', just do


'echo "foo in a 10.11.12.13" || gpg --clearsign || mail change@db.debian.org'


from an account that has access to your GPG key in the DebianKeyring.

To get a CNAME record for 'bar' that points to 'debbar.quux.com', just do


'echo "bar in cname debbar.quux.com." || gpg --clearsign || mail change@db.debian.org'


from an account that has access to your GPG key in the DebianKeyring. Be sure to get that trailing dot...it's critical.

Now, to have more than one debian.net address, you have to do a little more.

 echo "foo in a 10.11.12.13" > /tmp/changes
 echo "bar in cname debbar.quux.com." >> /tmp/changes
 echo "baz in a 10.11.12.42" >> /tmp/changes
 cat /tmp/changes || gpg --clearsign || mail change@db.debian.org
 rm /tmp/changes

Don't forget that the account you run this from needs to have access to your GPG key that's in the DebianKeyring.