Re: [cobalt-users] lame server

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Rodolfo Paiz wrote:

> On my to-do list for "soon" is something that O'Reilly "DNS and BIND"
> mentioned, and I loved:
> 
> Run *two* BIND daemons: one with recursive queries turned on, for your
> inside users only, and one without recursive queries, which everyone
> outside sees. Problem solved.

Yep <smile>.  As you know, I'm in the DNS business, and have a few at my
disposal <smile, again>.

I've given them until the end of the month, in a letter.  Effective
March 1st our "public" DNS servers are no longer recursive.

> Since I have only about 10 inside users, though, I may just go for the
> less elegant but simpler route: my inside users will have to use my
> upstream's DNS servers <grin>.

Not really a bad idea.  Our dialup users (I've sold the ISP, but I'm
doing a lot of contract work for the company that bought it) use
megapop's automatically supplied DNS servers.  Our DSL users (if/when we
start selling DSL) will use for primary the same DNS server our inhouse
users use, and for secondary, we'll set up one of ours as recursive but
NOT ever publicize it (we probably won't even give it a name) or use it
for customer DNS hosting.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205