Carla Schroder wrote:
OK I'm back with a thrilling installment of 'DNS Barbie says BIND is hard!'

disclaimer: I do not use bind for real! I just need to test stuff for a bind howto. djbdns forever! w00t. etc.

I have a caching server on one machine, and my authoritative server for my domain on a different machine, like good and wise DNS admins are supposed to do. This is my named.conf for the caching server:


// // sample BIND configuration file //

options {
  // tell named where to find files mentioned below
  directory "/var/named";
  // on a multi-homed host, you might want to tell named
  // to listen for queries only on certain interfaces
  listen-on { 127.0.0.1; 10.11.12.0/24; }
}

// The single dot (.) is the root of all DNS namespace, so
// this zone tells named where to start looking for any
// name on the Internet
zone "." IN {
  // a hint type means that we've got to look elsewhere
  // for authoritative information
  type hint;
  file "named.root";
};

// Where the localhost hostname is defined
zone "localhost" IN {
  // a master type means that this server needn't look
  // anywhere else for information; the localhost buck
  // stops here.
  type master;
  file "zone.localhost";
  // don't allow dynamic DNS clients to update info
  // about the localhost zone
  allow-update { none; };
};

// Where the 127.0.0.0 network is defined
zone "0.0.127.in-addr.arpa" IN {
  type master;
  file "revp.127.0.0";
  allow-update { none; };
};


On the authoritative server, do I still need to include the root zone entry? Seems to me that should belong only to the caching server.


Thanks!



I guess it depends on your needs here, but AFAICT Bind's license is nicers than djb's. But, djb's software is nicer than binds.. =(. Lose-Lose to me.


For caching situations, the best step is over to dnsmasq I think.

Since, I am not a bind-god, that is the best advice I can give.

thanks,
  Joshua
_______________________________________________
PDXLUG mailing list
[EMAIL PROTECTED]
http://pdxlug.org/mailman/listinfo/pdxlug

Reply via email to