Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

While searching for a secure dns server I came across the NSD project.

I was really impressed by what seemed to me the best option out there that's open source.

One problem thought their 'tutorial' is really not beginner friendly. I have basic DNS knoledge but what's in there is out of my league.

I need to have multiple sites on this CentOS server I've recently got my hands on. They also need to receive email.

I have a master host and would love to set this in the way described in the rows that follow: ->  ->

And so on.

Any help in setting up this DNS server please? All answers and suggestions are welcomed. Thank you in advance.

share|improve this question

migrated from Apr 24 '10 at 0:25

This question came from our site for computer enthusiasts and power users.

I know everyone's entitled to their own opinion, but have you tried BIND; I would argue it's the "best option out there that's open source". And there's a million how-to guides available and experts-a-plenty. – Chris S Apr 24 '10 at 2:33

NSD reads the same (RFC 1035) format zone files as BIND, so presumably your first hurdle is knowing what a zone file looks like?

Learning that requires a full DNS tutorial, but for your zones you'll need something like:

@        IN SOA   hostmaster ns1 (
                                    ... ; insert suitable values
         IN NS    ns1
         IN MX 10 mail
ns1      IN A ; put your name server's IP here
mail     IN A ; put your mail server's IP here
www      IN A ; put your web server's IP here

And in your nsd.conf file you just need:

    name: ""
    zonefile: ""
share|improve this answer

Bind 9 does not have a good security record, so yes go NSD

share|improve this answer
On what are you basing this statement? It sounds like utter FUD. BIND 9 has been around a very long time (11+ years!). In that time yes, security vulnerabilities have been found (show me one piece of 11-year-old software of any complexity that hasn't had vulnerabilities discovered), and more importantly they have been fixed. BIND is very widely deployed, and the ISC actively maintains the code, with an excellent track record of addressing vulnerabilities as they're discovered. – voretaq7 Feb 16 '12 at 20:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.