Re: [cobalt-users] DNS woes

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

A> Date: Thu, 16 Jan 2003 12:58:06 -0000
A> From: Ahmad


A> But in my new server, the cobalt acts as it's own nameserver.

One can override this.  However, it's usually easier to use the
GUI and let the RaQ be at least one of the nameservers.


A> You need two nameservers for the domain. But I only have one
A> physical nameserver. Will the registrar accept a secondary

Not good.  As others have mentioned, DNS reliability is a big
issue.


A> nameserver without an IP? Alternatively, can I use the same IP

Just how would other machines contact the nameserver if it lacked
an IP address?  No, you must specify an IP address.


A> for the secondary DNS?

You could... but why?  Many providers offer quality secondary DNS
for around $5-15/yr for a single zone, and much less in quantity.
Features vary widely.

While we're on the subject of proper DNS:

* Disable recursion, at least for external hosts.  There is no
  need for it on an authoritative nameserver.  It's easy on a
  RAQ550, but I've always ended up hacking the DNS CGI on older
  Cobalts.

* If you run a secondary, DO NOT set up A RRs on both primary and
  secondary.  Configure the secondary as a secondary.

* Be sure all nameservers listed on domain registration (i.e., in
  the gTLD delegations) are listed in your SOA.  Also make sure
  they are authoritative.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.