On 2/13/08, Sir June <[EMAIL PROTECTED]> wrote:
>
> apologies for Micro$oft things on this email, but i am looking for answers
> to recommend to use Linux as proxy and DNS resolver.
>
> problem: our office is using ISA proxy and it points to "root hint servers"
> as our DNS resolvers. ex-admin guy did that. now,

Bad netizen! Not you though... :)

It will work, but will put additional/unnecessary workload on the
Internet root servers.

> we can't resolve/get A
> record of our website that is hosted in our ISP. other parts of the world
> can see our website, but we from the inside can't get the A record, thus, we
> can't view the website.

Your root hint file is outdated. In Linux:

  # dig > root.hints

Should fix it. I don't know the comparable commands in windows.

When I was working in the ISP "Golden Era" business in the Phil. few
years ago, we get roughly the same problem as you have now. What
happened was some of the IP Address of the root hint servers have
changed. Everybody can resolve one site, but we can't. Running the
command above and cronned it every two weeks solve our problem.

> is it OK to use root hint servers? what is the catch?

See above.

> or should i use our ISP's  nameservers?

Definitely. I have not seen any ISP deny their customers to use their
DNS servers.

> i am looking for some answers to back up my proposal to use Linux DNS 
> forwarder and proxy.

You're on the right track, that's exactly what you need to do. You can
have multiple forwarders like your ISP DNS server and OpenDNS as what
others have mentioned. But:

  * If you have MS AD, then you might have to coordinate with windows
guys to implement this.
  * Administrative roles. Putting Linux in is easy, but in the long
term goal, you should have someone or you do the Linux System
Administration tasks. If you are busy, this might not want you want.
The easiest then for a short term goal is to instruct your ISA proxy
to use your ISP DNS server or Opendns in the first place.

-- 
regards,
Andre | http://www.varon.ca
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph

Reply via email to