On Wed, Jul 23, 2008, Lanny Marcus wrote:
On Sat, Jul 19, 2008 at 2:27 PM, John Hinton webmaster@ew3d.com wrote:
OK, so does anybody have a good firewall rule solution for what we're supposed to be doing with bind these days? Obviously port 53 is no longer enough.
Consider using djbdns instead of BIND. It sounds like an excellent alternative to BIND.
We have been using djbdns for years on a variety of Linux platforms and FreeBSD, largely because (a) security, (b) performance, and (c) ease of use. Not everybody likes Dan Bernstein, but I figure he's somewhat of a curmudgeon who designs good software.
As for not having it supported on CentOS, I really don't care about that as the majority of the server software we use is built under the OpenPKG.org portable packaging system, independent of the underlying OS vendor's packaging system.
Bill