Comments on How To Install And Use The djbdns Name Server On Debian Etch
How To Install And Use The djbdns Name Server On Debian Etch djbdns is a very secure suite of DNS tools that consists out of multiple parts: dnscache, a DNS cache that can be used in /etc/resolv.conf instead of your ISP's name servers and that tries to sort out wrong (malicious) DNS answers; axfrdns, a service that runs on the master DNS server and to which the slaves connect for zone transfers; and tinydns, the actual DNS server, a very secure replacement for BIND.
3 Comment(s)
Comments
I know this howto is written for etch (stable), but I recommend using these binary packages from sid (unstable) - a lot less work... If you also install daemontools-run, you get more control over daemontools.
Assuming you have installed all these packages (from sid), the "Next we configure dnscache, axfrdns, and tinydns" step becomes
dnscache-conf dnscache dnslog /etc/dnscache
axfrdns-conf axfrdns dnslog /etc/axfrdns /etc/tinydns 192.168.0.100
tinydns-conf tinydns dnslog /etc/tinydns 192.168.0.100
followed by
update-service --add /etc/dnscache
update-service --add /etc/axfrdns
update-service --add /etc/tinydns
You don't maintain the symlinks manually anymore, and you can use update-service to remove the service to.
I believe the progams are not supervised[1] when done like that, which should be avoided.
[1] man 8 supervise
You'll want to make sure you have fixes for these three vulnerabilities:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-4392
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0858
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1191