[linux-sec-uk] djbdns / dns

Andreas Landmark linux-sec-uk at mailman.lug.org.uk
Wed Aug 20 14:50:00 2003


On Wed, Aug 20, 2003 at 02:37:51PM +0100, Simon Adlem wrote:
> IMHO, I think BIND 9 is the definitive answer for DNS. 

It's not bad ;-)

> I use Qmail  - really good mailserver, in my opinion the best around, but I 
> don't like the way djbdns works even though djb recommends it for use with 
> Qmail.
> 
> Bind 9 is secure and has some cool functions which makes it my number one 
> choice every time.

Using DJBs cacheing-server is not stupid either, I have had several
setups with BIND answering externally (and serving authorative) with
djb-dns setup to listen on loopback.

DJB-dns does seem to do a better job at caching (speed and
memorywise) than BIND does...

-- 
Andreas D Landmark / noXtension
In any formula, constants (especially those obtained from handbooks)
are to be treated as variables.