#1  
Old 8th November 2006, 13:55
MvincM MvincM is offline
Member
 
Join Date: Apr 2006
Posts: 62
Thanks: 1
Thanked 4 Times in 2 Posts
Default Living without DNS

Hi,

Maybe anybody knows how to turn off the DNS for ISPConfig? I don not use DNS in ISP so I don't need them. As we known it is better to run off services which are not used (specially BIND).

On Debian I try to normally stop bind9 but ISP start him on his start/stop/restart process. So I don't want to use: "update-rc.d -f bind9 remove" because I can broke ISP (I think).

So I chose to secure DNS only to listen on localhost by editing confs file:

named.conf.options

listen-on port 53 { 127.0.0.1; };
listen-on-v6 { none; };
allow-query { 127.0.0.1; };
query-source address 0.0.0.0 port 53;

controls {
inet 127.0.0.1 allow { localhost; } keys { rndc_key; };
};

but after that my "netstat -lp" looks like:

tcp 0 0 localhost:953 *:* LISTEN 2930/named
udp 0 0 *:domain *:* 2930/named
udp 0 0 localhost:domain *:* 2930/named
udp6 0 0 *:46768 *:* 2930/named


so "*" mean that is open on all interfaces.

I don't have any idea for next search. Could you be so kind and help me or share your experience.

Thanks!

Best regards,
MvincM
Reply With Quote
Sponsored Links
  #2  
Old 8th November 2006, 18:38
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,781
Thanks: 821
Thanked 5,334 Times in 4,184 Posts
Default

In the ISPConfig interface, go to management > server > services and set DNS Server to off.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 8th November 2006, 18:50
MvincM MvincM is offline
Member
 
Join Date: Apr 2006
Posts: 62
Thanks: 1
Thanked 4 Times in 2 Posts
Default

Yes - thanks - it works.

But... there is still link in /etc/rc2.d to /etc/bind9 with letter "S" so after reboot server run once again (or maybe after starting bind isp turn him off).

MvincM
Reply With Quote
  #4  
Old 8th November 2006, 18:56
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,781
Thanks: 821
Thanked 5,334 Times in 4,184 Posts
Default

Quote:
Originally Posted by MvincM
Yes - thanks - it works.

But... there is still link in /etc/rc2.d to /etc/bind9 with letter "S" so after reboot server run once again (or maybe after starting bind isp turn him off).
The symlinks are not controlled by ISPConfig. You will have to remove the symlink manually.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 8th November 2006, 19:00
MvincM MvincM is offline
Member
 
Join Date: Apr 2006
Posts: 62
Thanks: 1
Thanked 4 Times in 2 Posts
 
Default

Once again thanks !
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS Configuration Problems VMartins Installation/Configuration 10 24th July 2007 14:40
Newbie DNS totally confuse. Rock General 9 1st June 2006 00:01
Using a different DNS server with Dynamic DNS CombatGod Installation/Configuration 1 11th May 2006 17:43
Pri & Slave DNS HOWTO (FC4) ppettigrew Suggest HOWTO 0 1st April 2006 15:35
Reverse DNS disasm General 3 13th January 2006 19:43


All times are GMT +2. The time now is 09:41.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.