[cobalt-users] BIND and DNS Question

[Brad Galbraith <brad@xxxxxxxxxxxxxxxxxxx>]

I realize that many people use their RaQ webserver as a DNS server as well,
and that, for the most part, if you are using a Linux based box for DNS you
are at risk from the recent BIND hacks.

My question is this, wouldn't it be fundamentaly better to use seperate DNS
servers so at the very least your customers sites wouldn't be compromised?

Seems to me that the risk of combining these functions on one unit now opens
you up to double trouble (BIND and Linux in general). I realize that if your
DNS is down completely the sites are for the most part down as well, but at
least you don't have your customers sites (some of which could contain very
sensitive data) at risk too.

Brad