Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Feb 2000 23:56:56 +0100
From:      "Leif Neland" <leifn@neland.dk>
To:        "wellsian" <wellsian@caffeine.com>, "James Wyatt" <jwyatt@rwsystems.net>
Cc:        "Gene Harris" <zeus@tetronsoftware.com>, "David A. Gobeille" <dgobe@mcs.net>, <freebsd-isp@FreeBSD.ORG>
Subject:   Re: DSL firewall and DNS
Message-ID:  <03de01bf75ac$918991c0$0e00a8c0@neland.dk>
References:  <Pine.BSF.4.21.0002121023510.40808-100000@boris.netgate.net>

next in thread | previous in thread | raw e-mail | index | archive | help
You won't be misrepresenting the primary/secondary relationship, as you =
are never presenting this to the world anyway.

Primary/secondary is a purely administatively distinction, which has =
nothing to do with which nameservers you present to the world. The =
primary is just the one you are maintaning your zone file on; the world =
has no way of knowing (or at least cares not about) which one it is.

You could even have only the secondaries listed and online, as long as =
your primary is online once in a while to keep the secondaries knowing =
the zone is still valid.

=20

> This is exactly what I've wanted to do for a couple installations, but =
I
> haven't felt secure about misrepresenting the primary/secondary
> relationship. Are there any technical reasons not to do what James
> suggests?
>=20
> Thanks,
> Dave
>=20
> On Sat, 12 Feb 2000, James Wyatt wrote:
>=20
> > On Sat, 12 Feb 2000, Gene Harris answered David A. Gobeille's =
DSL/DNS
> > questions with:
> > [ ... ]
> > > Now that I have a better idea about your service, you'll be
> > > a lot better off letting the isp be your 2nd DNS server.
> > > That way, if your machine blows up, folks can still view
> > > your web site, send you email, etc.
> >=20
> > Or have your ISP secondary from your primary DNS server on your DSL =
and
> > put their servers on the InterNic records... You will also have =
fewer
> > folks trying to hack your primary DNS server when it isn't listed. =
8{)
> >=20
> > It lets you update easily while providing more reliable and faster =
DNS
> > host. (Not to knock your host, but the link adds a hop or two, a =
dozen or
> > so mS, and more pieces) Always reduce the path to DNS servers... - =
Jy@
>=20
>=20
>=20
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
>=20



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?03de01bf75ac$918991c0$0e00a8c0>