[gentoo-user] Re: DNSSEC

2010-11-12 Thread James
Alan McKinnon alan.mckinnon at gmail.com writes: My first spot of advice would be to use unbound as your caching servers - Did you experiment iwth ldns-utils (Set of utilities to simplify various dns(sec) tasks) ??? James

[gentoo-user] Re: DNSSEC

2010-11-12 Thread James
PowerDNS is a fine auth server. If it suits your needs I'd recommend you try it first. I don't know about it's DNSSEC abilities or feature roadmap - it's been a long time since I looked closely at it. Lack of ACLs is what killed PowerDNS for us, I still feel sad about that Using ACL

Re: [gentoo-user] Re: DNSSEC

2010-11-12 Thread Alan McKinnon
Apparently, though unproven, at 16:18 on Friday 12 November 2010, James did opine thusly: Alan McKinnon alan.mckinnon at gmail.com writes: My first spot of advice would be to use unbound as your caching servers - Did you experiment iwth ldns-utils (Set of utilities to simplify various

[gentoo-user] Re: DNSSEC

2010-11-10 Thread James
Alan McKinnon alan.mckinnon at gmail.com writes: My first spot of advice would be to use unbound as your caching servers - Yes, I'm going to play around with unbound first. PowerDNS is a fine auth server. If it suits your needs I'd recommend you try it first. I don't know about it's

[gentoo-user] Re: DNSSEC

2010-11-08 Thread James
Alan McKinnon alan.mckinnon at gmail.com writes: I know how non-trivial it is FABULOUS!!! With several Domain names, I'll just let the local ISP resolve one and I'll set up servers to resolv the other(s) and pull the cables if necessary. Lots of physical partitioning on my

Re: [gentoo-user] Re: DNSSEC

2010-11-08 Thread Stroller
On 8/11/2010, at 9:01pm, Kyle Bader wrote: Nothing here to steal, unless hacks can jump an air gap firewall(ha ha) Sorry to go off on a tangent but I couldn't help pointing out a common misconception: you don't need to worry about security because you assume you don't have

Re: [gentoo-user] Re: DNSSEC

2010-11-08 Thread Alan McKinnon
Apparently, though unproven, at 19:23 on Monday 08 November 2010, James did opine thusly: you can write a wiki page that helps others immensely. But just be informed upfront about what it's going to take. wink wink, nudge nudge. OK. ;-) My first spot of advice would be to use