Re: Cache only and reverse mapping

2011-12-20 Thread Matus UHLAR - fantomas
On 19.12.11 11:40, sasa sasa wrote: I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing 2 DNSs (2

Re: Cache only and reverse mapping

2011-12-19 Thread sasa sasa
>> I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree >> (answering world), and I know about cache vulnerabilities so I was wondering >> what is the best solution for ISPs? >> By separating cache from authorities, you mean implementing 2 DNSs (2 >> different IPs)? This d

Re: Cache only and reverse mapping

2011-12-19 Thread Kevin Darcy
On 12/16/2011 11:22 AM, sasa sasa wrote: I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing 2 DNSs

Re: Cache only and reverse mapping

2011-12-16 Thread J
sasa sasa wrote: > I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation > tree (answering world), and I know about cache vulnerabilities so I was > wondering what is the best solution for ISPs? By separating cache from > authorities, you mean implementing 2 DNSs (2 different IPs)?

Re: Cache only and reverse mapping

2011-12-16 Thread John Wobus
On Dec 16, 2011, at 11:22 AM, sasa sasa wrote: I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing

Re: Cache only and reverse mapping

2011-12-16 Thread sasa sasa
I'm trying to setup a DNS for an ISP, this ISP's DNS is in delegation tree (answering world), and I know about cache vulnerabilities so I was wondering what is the best solution for ISPs? By separating cache from authorities, you mean implementing 2 DNSs (2 different IPs)? This doesn't sound pra

Re: Cache only and reverse mapping

2011-12-16 Thread John Wobus
On Dec 15, 2011, at 3:07 AM, sasa sasa wrote: For an ISP, is there any risk in configuring BIND DNS as cache only and adding customer's reverse mapping zones? If this copy of the reverse zone is for the world's use (i.e. in the delegation tree), then your DNS server would be answering querie

Re: Cache only and reverse mapping

2011-12-15 Thread /dev/rob0
On Thursday 15 December 2011 02:07:12 sasa sasa wrote: > For an ISP, is there any risk in configuring BIND DNS as cache > only and adding customer's reverse mapping zones? Any other > possible implementations? To be precise, when you are serving any zones authoritatively, your server is no longer

Cache only and reverse mapping

2011-12-15 Thread sasa sasa
For an ISP, is there any risk in configuring BIND DNS as cache only and adding customer's reverse mapping zones? Any other possible implementations? regards, Sa ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from thi