Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking for an Iterative Resolver server - a server that would handle the DNS resolutions for PC users in an environment. I am well aware of the Microsoft DNS and Bind, and also of free services like Google DNS and OpenDNS.

However, I am looking for alternative solution which I can install on premise. Any suggestions recommendations? (paid - free - or open source)

share|improve this question
Looking for a bit of insight: What's wrong with MS DNS or BIND? They both fulfill the requirements of your question. – Chris S Aug 31 '11 at 14:54
MS DNS won't do DNSSEC validation, if that matters. – Alnitak Aug 31 '11 at 15:28
Is not about what is wrong with MS or Bind. They all have pros and cons. I did not want to be stuck with selecting between the two, I wanted to test alternatives. – GeorgeU Sep 7 '11 at 21:13

I usually install a linux box with unbound to act as a resolver for the network. It's simple enough to configure on Debian: just install the system, then unbound and make it listen on the LAN interface instead of

share|improve this answer

Both Bind and Microsoft's implementation can be - and usually are - installed on premise. Bind is also free, and requires a U*X like operating system, usually linux, though I think I remember a windoze implementation existed. MS's' comes with any "server" OS (not free). (If you chose the linux path, you will also find there's a smattering of "lite" resolvers you could use instead of bind.)

So before we probe any further, could you clarify why MS/Bind do not satisfy you?


share|improve this answer
BIND does exist for Windows, as does Unbound. – Alnitak Aug 31 '11 at 15:21
I simply wanted to test and compare different solutions. Did not want to be stuck to those default 2 DNS resolver solutions. – GeorgeU Sep 7 '11 at 21:10
If so, then dnsmasq (linux) may be for you. It also bundles a dhcp server (which I believe can be turned off). There is also something called (I think) djbdns, which I cannot stand in the least - but then, I cannot stand qmail, either (same author/philosophy). If you like qmail, you may want to look into that. As far as "stuck" goes, BIND was - and still is, AFAIK - the reference implementation for nameservers. Please also note that, in AD - or even windows domain - situations, turning off nameserving in the DC is a real PITA. – Alien Life Form Sep 14 '11 at 7:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.