I think the main new feature in 9.10 is response rate limiting.

From: Josh Baird via Af 
Sent: Thursday, October 02, 2014 8:08 PM
To: [email protected] 
Subject: Re: [AFMUG] DNS server for guys who dont want to be gurus

You can if you use third party packages, but you don't need to unless you need 
a specific version beyond 9.9.  If you run native CentOS bind packages and keep 
them up to date you will (read: should) be safe from any security 
vulnerabilities.

On Thu, Oct 2, 2014 at 8:51 PM, That One Guy via Af <[email protected]> wrote:

  i assume i cant update BIND beyong releases specific to CentOS?

  On Thu, Oct 2, 2014 at 7:28 PM, Ken Hohhof via Af <[email protected]> wrote:

    My BIND servers are on 9.10.0-P2.

    From: That One Guy via Af 
    Sent: Thursday, October 02, 2014 6:10 PM
    To: [email protected] 
    Subject: Re: [AFMUG] DNS server for guys who dont want to be gurus

    I already have installed bind through webmin, it is a newer version, just 
by a couple revisions but the ubuntu one wont update any more 
    its BIND version 9.8.2
    I can manually add the slave zone and test the transfer it updates from the 
master, I just assumed I should be able to add it as another slave and have it 
populate all the way

    On Thu, Oct 2, 2014 at 5:30 PM, Ken Hohhof via Af <[email protected]> wrote:

      You need a named.conf that defines the slave zones and the IP address of 
the master.

      But first step is to download/compile/install the latest version of BIND, 
it’s actually quite easy.  I doubt you can get the version you want via yum 
update because CentOS is based on RHEL which is always a few steps behind.  
Given the DNS attacks, you want the latest BIND.  You might then want to lock 
out the package from being updated by yum.


      From: That One Guy via Af 
      Sent: Thursday, October 02, 2014 4:36 PM
      To: [email protected] 
      Subject: Re: [AFMUG] DNS server for guys who dont want to be gurus

      So Im at a new Centos with webmin fresh bind install. 
      We have one master, one slave server
      I have never set up bind, this was done before me.
      If I were to take down the old slave server and bring this one up on its 
IP will the master update this one, or is there a config I need to move over. 
Im more comfotable doing the slave first.
      These are all webmin, but the original is ubuntu and the new is centos

      On Thu, Oct 2, 2014 at 2:00 PM, Paul Stewart via Af <[email protected]> wrote:

        I always install CentOS bare bones …. “minimal server” is what the 
installation will call it.  This way you can install whatever you like after 
installation and not worry about removing many dozen packages you don’t need…



        Just my preference anyways….



        From: Af [mailto:[email protected]] On Behalf Of That One Guy via Af
        Sent: Thursday, October 02, 2014 2:24 PM
        To: [email protected]
        Subject: Re: [AFMUG] DNS server for guys who dont want to be gurus



        2 questions in this

        1. when running through the current centos installation, what do i 
select for the server type, for powercode it says select basic server

        2. is there a guide for building dedicated centos servers based on 
server purpose? I assume there are packages I dont need to install if its only 
got this purpose



        On Thu, Oct 2, 2014 at 1:13 PM, Paul Stewart via Af <[email protected]> 
wrote:

          CentOS+BIND+Webmin J  I can’t remember but Usermin might be the part 
you’re looking for specific to users updating their own DNS…..







          From: Af [mailto:[email protected]] On Behalf Of That One Guy via 
Af
          Sent: Thursday, October 02, 2014 1:21 PM
          To: [email protected]
          Subject: [AFMUG] DNS server for guys who dont want to be gurus



          Is there a good, simple package for locally hosted DNS Servers for 
people like me who dont want to get too far into managing the linux at a 
granular level? we are used to the webmin interface. It would be nice if it had 
the option to set up client accounts for some clients to manage their own DNS 
but not view others, but thats in no way a deal breaker




          -- 

          All parts should go together without forcing. You must remember that 
the parts you are reassembling were disassembled by you. Therefore, if you 
can't get them together again, there must be a reason. By all means, do not use 
a hammer. -- IBM maintenance manual, 1925







        -- 

        All parts should go together without forcing. You must remember that 
the parts you are reassembling were disassembled by you. Therefore, if you 
can't get them together again, there must be a reason. By all means, do not use 
a hammer. -- IBM maintenance manual, 1925





      -- 

      All parts should go together without forcing. You must remember that the 
parts you are reassembling were disassembled by you. Therefore, if you can't 
get them together again, there must be a reason. By all means, do not use a 
hammer. -- IBM maintenance manual, 1925





    -- 

    All parts should go together without forcing. You must remember that the 
parts you are reassembling were disassembled by you. Therefore, if you can't 
get them together again, there must be a reason. By all means, do not use a 
hammer. -- IBM maintenance manual, 1925





  -- 

  All parts should go together without forcing. You must remember that the 
parts you are reassembling were disassembled by you. Therefore, if you can't 
get them together again, there must be a reason. By all means, do not use a 
hammer. -- IBM maintenance manual, 1925

Reply via email to