PDA

View Full Version : Living without DNS


MvincM
8th November 2006, 14:55
Hi,

Maybe anybody knows how to turn off the DNS for ISPConfig? I don not use DNS in ISP so I don't need them. As we known it is better to run off services which are not used (specially BIND).

On Debian I try to normally stop bind9 but ISP start him on his start/stop/restart process. So I don't want to use: "update-rc.d -f bind9 remove" because I can broke ISP (I think).

So I chose to secure DNS only to listen on localhost by editing confs file:

named.conf.options

listen-on port 53 { 127.0.0.1; };
listen-on-v6 { none; };
allow-query { 127.0.0.1; };
query-source address 0.0.0.0 port 53;

controls {
inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
};

but after that my "netstat -lp" looks like:

tcp 0 0 localhost:953 *:* LISTEN 2930/named
udp 0 0 *:domain *:* 2930/named
udp 0 0 localhost:domain *:* 2930/named
udp6 0 0 *:46768 *:* 2930/named


so "*" mean that is open on all interfaces.

I don't have any idea for next search. Could you be so kind and help me or share your experience.

Thanks!

Best regards,
MvincM

till
8th November 2006, 19:38
In the ISPConfig interface, go to management > server > services and set DNS Server to off.

MvincM
8th November 2006, 19:50
Yes - thanks - it works.

But... there is still link in /etc/rc2.d to /etc/bind9 with letter "S" so after reboot server run once again (or maybe after starting bind isp turn him off).

MvincM

till
8th November 2006, 19:56
Yes - thanks - it works.

But... there is still link in /etc/rc2.d to /etc/bind9 with letter "S" so after reboot server run once again (or maybe after starting bind isp turn him off).

The symlinks are not controlled by ISPConfig. You will have to remove the symlink manually.

MvincM
8th November 2006, 20:00
Once again thanks !