Just make sure AXFR is disabled if you're hosting with a third-party. You don't want anyone doing a transfer of your zone. Otherwise I can't think of any huge security implications??? I'd also make sure to restrict access to a specific range.
On Sun, Oct 3, 2010 at 4:17 AM, Edmund Cramp <[email protected]> wrote: > Ask Jerry at Netshapers (http://www.netshapers.com) - I don't know where > they stand with AD but they've provided us with a BIND slave for about 10 > years with no problems although it's not a service that they advertise. > > Regards, > Edmund Cramp - [email protected] > Motion Lab Systems, Inc. - http://www.motion-labs.com > 15045 Old Hammond Highway, Baton Rouge, LA 70816 USA > Tel: 1.225.272.7364 (Central Time Zone, GMT-6) > Fax: 1.225.272.7336 > > > ------------------------------ > *From:* [email protected] [mailto:[email protected]] *On > Behalf Of *Dustin Puryear > *Sent:* Friday, October 01, 2010 1:15 PM > *To:* [email protected]; [email protected]; LOPSA Tech List > *Subject:* [brlug-general] Offsite DNS hosting for Active Directory > > We have a [common] situation where a company has a single site, has > Active Directory, and only has one Domain Controller (DC). We could bring up > a second DC, but there are hardware and licensing costs. That, and most AD > networks that are workstation-heavy can survive quite well after a DC goes > down for a good bit of time. If you exclude the fact that the DC is also the > DNS primary for that network. > > > > Anyone know of a DNS hosting service that is known to play well with > hosting secondary DNS for AD DNS? > > > > And what are your thoughts on this in terms of security? Anyone using a > hosting service to provide secondary DNS capabilities for internal DNS? > > > > --- > > Puryear IT, LLC - We see IT differently. > > Baton Rouge, LA - 225-706-8414 > > http://www.puryear-it.com/ > > > > > _______________________________________________ > General mailing list > [email protected] > http://mail.brlug.net/mailman/listinfo/general_brlug.net > > -- "The world's my oyster, a hotel room's my prison cell..."
_______________________________________________ General mailing list [email protected] http://mail.brlug.net/mailman/listinfo/general_brlug.net
