The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
52 views

How do you load balance a forwarding only server… with no authoritive zones?

New Thought and possible answer to my Question? Would it be possible to change the root config file (the db.root with A/B/C/D/E/F/etc.ROOT-SERVERS.NET) and remove the original entries (i.e: ican ip ...
2
votes
4answers
4k views

bind9: Disabling error logging for recursive queries

inadvertedly, a bind9 server I ran was an open resolver. Whoops. Now it's been months and the recursive queries for isc.org are still incoming. I would not mind if my /var/log/syslog did not look ...
1
vote
1answer
1k views

DNS answer with/without authority, additional sections

dig @ns7.embarqservices.net www.126.com A +dnssec +multiline ; <<>> DiG 9.7.3 <<>> @ns7.embarqservices.net www.126.com A +dnssec +multiline ; (1 server found) ;; global ...
5
votes
1answer
1k views

measures to take against a dns amplification attack

I recently discovered that my server was being used as part of a DNS DDOS. Basically, my BIND setup allowed recursion, and it was used to attack a certain IP address using IP spoofing. I took the ...
2
votes
2answers
2k views

Please explain Authoritative Nameserver and Recursive Resolver

I am new to networking and all this DNS thing. I have the following questions What is an Authoritative Nameserver ? What is a Recursive Resolver ? Please help/guide me out on this. I have ...
0
votes
1answer
191 views

NS server selection (mixed glue/non-glue NS from the parent zone)

Apart from the source code, there seems to be virtually no public information on the web of how BIND and djbdns, amongst other recursive resolvers, select which NS servers they will query as part of ...
11
votes
4answers
7k views

DNS recursion is insecure, but necessary for internal applications?

In management of a Windows Server 2008, the server hosts DNS (is nameserver) for some domains, as well as hosting some applications that are publicly accessible. A security scan has indicated that ...
0
votes
1answer
145 views

Public and Private Bind servers [duplicate]

Possible Duplicate: Overriding some DNS entries in BIND for internal networks I have two bind servers. One is at my colo, the other is on my LAN. They both use the same dns zone, ...
12
votes
2answers
2k views

Who actually “recurses” in a recursive DNS lookup?

I'm trying to understand the difference between iterative and recursive DNS lookups. Fundamentally, I think of iterative as being like calling a department store looking for a product, and when they ...
0
votes
1answer
225 views

pdns-recursor incorrect result for dig

I am a linux newbie and got assigned this task to get the error in our company dns where when we do a dig on localhost, example "dig google.com@localhost" i get an NXDomain status and no answer ...
4
votes
7answers
29k views

Dig returns “status: REFUSED” for external queries?

I can't seem to work out why my DNS isn't working properly, if I run dig from the nameserver it functions correctly: # dig ungl.org ; <<>> DiG 9.5.1-P2.1 <<>> ungl.org ;; ...
1
vote
7answers
2k views

Running a recursive DNS server on localhost

Every so often, people here ask "should I use my ISP DNS or (google/opendns)"? What I want to know is, why not run a local recursive server yourself on your own computer or local network? Then just ...