Tag Info

Hot answers tagged

17

Correct, it is a breach of RFC 1034, section 3.6.2, paragraph 3: ... If a CNAME RR is present at a node, no other data should be present; this ensures that the data for a canonical name and its aliases cannot be different. ... This applies here because the root of your zone must also have SOA and NS records.


5

Could you just use the DNS server of your domain name registrar? They usually support subdomains etc. EDIT: In addition your hosting provider often supplies a DNS server as well (even if you rent a VPS or dedicated server).


4

For secondary DNS services, I use afraid.org and buddyns.com; both free.


4

If DynDNS (or whatever you're using for DNS service) fails, then you're toast. The provider can mitigate the risk of failure in a variety of ways, to the point where (in theory) they should be able to provide a strong SLA with reasonable compensation for outages -- the fact that they don't is an interesting data point.


4

Sure. This is an acceptable workaround. Better would be to configure the router not to expose the web interface for external IPs, configure it to run on a separate port than 80, password-protect the web interface. But sometimes you have these very cheap routers that can't be configured that way. Buying a better one is recommended but not necessary.


4

Installing anything creates a potential for vulnerabilities - e.g., if there's a vulnerability in the dropbox daemon (or whatever protocol you use for sharing files), or in any other software on your Linux box, it would be possible to exploit it (once it's known). You'll need to evaluate how much of a risk this is for each component that you want to use ...


4

If I understand correctly, what you want is a CNAME DNS record: http://en.wikipedia.org/wiki/CNAME_record


4

Rent a virtual private server. If that's not enough for your needs, rent a managed host. IF you want to run everything yourself, buy a 1U server, install what you want on it, and buy some colocation space for it.


4

DynDNS will provide a name to IP resolution (something.homeip.net to 123.123.123.123). You don't need Custom DNS to do this unless you require your own domain. Your port forwarding will work regardless of which option you choose. Your router will provide the port forwarding. You can configure your router to forward like this: WAN IP, Port 5900 -> PC ...


4

If you wanted to redirect ReallyCoolName.com to Google's main search page, I would suggest a CNAME record instead of an A record, because then you effectively eliminate the need for administrating the domain. It's all Google's responsibility at that point. Also, Google employs load-balancers and (I think...) round-robin DNS to efficiently distribute the ...


3

Check your router as some routers have this function build in..


3

My suggestion would be to move your name servers to DynDNS, set up your DNS records there, and install one of their dynamic DNS clients somewhere on your local network to keep your dynamic ip address in sync with your DNS records. I use DynDNS and host 6 web sites at home using their dynamic DNS client.


3

we use dnsmadeeasy, pretty reliable. But nonetheless, you can configure secondary name server as well as long as you are paying 2 providers to host your DNS.


3

Your idea is correct. What you can do is make dev.example.com a CNAME that points to your home network. You need to figure out how to use DynDNS (it's really trivial, sign up then enter the information into your router). After which you make the CNAME point to your DynDNS domain. Make sure to redirect port 80 and 443 if your web server is behind NAT.


3

Here is your problem: james.dontexist.net has address 192.168.2.2 You've set up your dynamic DNS entry to point to a private RFC 1918 address. These addresses are not routable on the public Internet, so nobody outside your LAN would ever be able to reach you. To resolve the issue, use your public Internet address (provided by your ISP) instead. And ...


3

I would expect it to be the name of the host e.g. myhost as the zone would be dyndns.org.


3

This is because you are likely using a dynamic 'consumer' IP from your ISP. Most of these are blacklisted on Barracuda and similar RBL's due to various malware and spam sent over them without most users knowing (which is one of the many reasons you should use a static IP for any business needs.) You can try and get the IP removed but it will be wasted ...


2

You have "over 100 domains, and we have servers all over" and DNS Made Easy's about ~250 USD per year to host you is too expensive? Nope, I don't know of a DNS hosts who will host 100+ domains with great service for peanuts. (But DNS Made Easy has a 60 USD/year plan, to which you can buy additional domains at 2 USD/year). You could: Move all your domains ...


2

The downside would be that dynamic DNS is still DNS, and therefore subject to DNS caching (and violations of the specified TTL are rampant on the internet - AOL was infamous for forcing all TTLs to a minimum of one hour regardless of what's specified by the authoritative name server). Quite simply DigitalOcean does not seem to be an appropriate solution ...


2

The reason split horizon DNS is set up is almost always because an internal service cannot be reached off of the LAN. For example, Active Directory domain controllers that also hold internal DNS. If your all of your services are intended to be externally reachable then split DNS isn't necessary, strictly speaking. Discard any use of split DNS in your design ...


2

I've got it working today with the help of the website http://www.shakabuku.org/writing/dyndns.html which I had just found.


2

http://ip.seveas.net/dnsgraph/png/www.epnddns.com/?skip_.=on&show_A=Show http://ip.seveas.net/dnsgraph/png/epnddns.com/?skip_.=on&show_A=Show So ns3 is working correctly, but ns4 is not responding. You also forgot to add an A record for the domain. Something like: @ IN A x.x.x.x //my third VPS which is a webserver The @ means: the ...


2

Good summary and, yes, your plan seems fine. Two name servers is indeed a mandate from the standard, RFC 1034. It is for resiliency reasons (if Sandy strikes one on the East Coast, the other on the West Coast will go on). Also, BIND is not the only name server software, do not forget to check the others.


2

and i dont have access to router Then nobody outside your LAN can access your machine. It's not just sub-netted, it's masqueraded (and possibly firewalled too).


2

Protocols (well the applications that implement them) have to be designed to take advantage of SRV records. Take Outlook for example. When it tries to automatically look up your Exchange server, it will look for an SRV record based on the domain part of the email address (_autodiscover._tcp.{domain}). If found, it will connect to the server and port ...


2

Three more free DNS providers that can be used as secondaries: Namecheap - http://www.namecheap.com/products/freedns.aspx Xname - http://www.xname.org/ (more than 25 domains is considered "abusive" without donation; see their conditions) ClouDNS - http://www.cloudns.net/ (max 6 domains free) I've used PointHQ: they don't really support being a secondary ...


2

There need be no connection between any external DNS name and any hostnames/internal DNS. What you call the hostname (sometimes the 'local part'), should be alphanumeric, no dots. There's a whole RFC on how to pick a name. Your DNS suffix ('domain name') is added to hostnames when you try and resolve them. As you say, even if you have servers 'foo' and ...


2

•No bandwidth limit •Allowed to have unlimited traffic •No complaints about the content of my site from the ISP Yes, totally easy. First, make sure all users are connected to you not using the internet. Second, make sure you run the server and your users are in a country where all content is legal or noone else than your agreed upon trustworthy ...


2

DNS MX record priorities are really just what they sound like. You give each record a priority (the lower the number the higher the priority) and in theory mail servers try the highest priority record first, and if it doesn't respond they try the next one, etc. I'm a little unsure why you've got records listed from 10 to 70, have a look at this for the ...


2

Depending on the DNS server that they use you sometimes need to remove the priority value and place it in the separate priority field (like you would an MX record). The standard format for a SRV record is _service._proto.name TTL class SRV priority weight port target Using the Advanced interface you'd put _xmpp-server._tcp. in the Host box, SRV as the ...



Only top voted, non community-wiki answers of a minimum length are eligible