Re: [Sheflug] Guide to setting up DNS server

[Alex Hudson <home [at] xxxxxxxxxxxxxx>]

On Wed, 2003-11-12 at 23:13, Andy B wrote:
> I've tried Dan Bernstein's DJBDNS and although it's reasonably easy to 
> configure I found it a real pain to compile and install.

It's also not particularly featureful, or standards compliant even by
DJB's standards. Domain transfer, in particular, is a real headache, as
is slaving IIRC. It's also not free software.

> BIND 8 certainy had some fairly major secury holes in it but I don't 
> know of any in newer versions?

bind 9 is a completely different kettle of fish. I think it's had like
two serious advisories or something, relating to external libraries
(like the OpenSSL one). It's also simpler software.

> My advice is learn how DNS works first and then try BIND before you take 
> the Bernstein plunge...

Definitely - DNS is something which you need to know at least the
rudiments of, or you will never really get it working. But there are
lots of handy guides and model configurations out there to get you
started on the right path.

Cheers,

Alex.

___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.