How To create a non-recursive nameserver

[bruin03]

Thanks again, Jeff!
I got it sorted out.

 

[DirectAdmin Support]

Hello,

We use an open dns servers because a lot of time we end up having to set our IP address in the /etc/resolv.conf when doing install on some people's servers, because they don't have any working nameservers

We also have no issues with leaving it open, even if we didn't need to do lookups with it. The only people who can cause problems with open dns is the owner of the domain itself, so there isn't any issue from any sort of outside party messing up anything. Worst case, the owner of the domain sets a wrong IP in his dns.. we do a lookup, that wrong IP is cached. I'd blame the admin, not our dns

John

 

[felosi]

what about these dns aplification attacks where they are hacking open resursion dns servers and using them ddos people?

Most datacenters now should be able to handle closed dns servers

 

[DirectAdmin Support]

Well, we'd have a cached value on our end. If they keep hitting us with the same request, our server will take the load, and not send out the new request to the other server.

Either way, it's up to the admin's discression if they want it open or not..

I'll close it down on our end anyway, if anyone was using it, sorry

John

 

[nobaloney]

we end up having to set our IP address in the /etc/resolv.conf when doing install on some people's servers, because they don't have any working nameservers

You could always put it into their /etc/hosts file .

Jeff

 

[winger]

Debian

hello,

how to do that in a debian box?

the file at /etc/bind/named.conf is not the same

any help?

regards,
winger.

 

[DirectAdmin Support]

http://help.directadmin.com/item.php?id=115

 

[winger]

Hello,

I´ve add that line at /etc/bind/named.conf.options

and it´s working

thank you

 

[Kolo]

I recommend to add all server IPs after 127.0.0.1 in acl's. Otherwise some clients DNS-related PHP scripts might not work properly.

Just my own experience.

 

[inferencia]

Hello,

I´ve add that line at /etc/bind/named.conf.options

and it´s working

thank you

Working for me too (Debian) !

Don't forget to restard named

 

[DRKT]

Hi!

i have 2 servers Linux RedHat 8 and Windows 2003.
i have register in DNS
ns1.mydomain.com
ns2.mydomain.com
ns3.mydomain.com
ns4.mydomain.com

the same informations record on linux and windows (A record etc..)

The dnsreport web site it's ok! but the email form (Web) don't send email and this error apear:
---------
Recipient: [SMTP:myname@other_extern_domain.net] Reason: The message could not be delivered because the domain name (other_extern_domain.net) does not have any DNS records.
---------
and if remove recursion config... email form work fine... why?

Look named.conf:

acl "trusted" {
64.xx.xx.xxx/27;
64.xx.xx.xxx/27;
192.168.0.1/24;
127.0.0.1;
};


options {
directory "/var/named";
version "not currently available";
allow-recursion { trusted; };
allow-notify { trusted; };
allow-transfer { trusted; };
};

logging {
category lame-servers {
null;
};
};
---------------------