Date: Tue, 16 May 2000 13:25:31 +0100 From: User Datagram Protocol <udp@closed-networks.com> To: Stuart Henderson <stuart@eclipse.net.uk> Subject: Re: pid file for named Message-ID: <20000516132531.M2139@closed-networks.com> In-Reply-To: <20000516131606.C16398@naiad.eclipse.net.uk>; from stuart@eclipse.net.uk on Tue, May 16, 2000 at 01:16:06PM %2B0100 References: <Pine.BSF.4.21.0005160634430.21765-100000@srh0902.urh.uiuc.edu> <20000516131606.C16398@naiad.eclipse.net.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, May 16, 2000 at 01:16:06PM +0100, Stuart Henderson wrote:
> On Tue, May 16, 2000 at 06:48:05AM -0500, Frank Tobin wrote:
> > One often wishes to run daemons such as named under other users, e.g.,
> > bind:bind. In order to allow bind to write out zones and associated fun
> > stuff correctly, one then does a
>
> For dns, surely djb's servers are a better choice where
> security is a priority?
>
I have no firm figures, just subjective time perception, but a box
running djb's dnscache seemed a heck of a lot slower than another box
running regular BIND at doing reverse lookups...
The machines are both running 4.0-RELEASE and are of comparable spec.
--
Bruce M. Simpson aka 'udp' Security Analyst & UNIX Development Engineer
WWW: www.closed-networks.com/~udp
Dundee www.packetfactory.net/~udp
United Kingdom email: udp@closed-networks.com
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000516132531.M2139>