Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Jul 2009 18:27:46 -0400 (EDT)
From:      vogelke+unix@pobox.com (Karl Vogel)
To:        freebsd-questions@freebsd.org
Subject:   Re: Should DNS be on same server as webserver?
Message-ID:  <20090713222746.5D519BF05@kev.msw.wpafb.af.mil>
In-Reply-To: <4A5B68DC.2070505@radel.com> (message from Jon Radel on Mon, 13 Jul 2009 13:03:24 -0400)

next in thread | previous in thread | raw e-mail | index | archive | help
>> On Mon, 13 Jul 2009 13:03:24 -0400, 
>> Jon Radel <jon@radel.com> said:

J> Apache and Bind have both had their security issues over the years, and
J> there's something to be said for running them on different servers to
J> reduce both the "all eggs in one basket" factor and the ease of
J> spreading an attack.  (Yes, I'm assuming what you're actually
J> running....)

   You can fix the security problems by dumping Bind and using djbdns.
   It's very easy to set up a caching nameserver without using all the
   memory on your system.  See http://www.lifewithdjbdns.com/ for more.

-- 
Karl Vogel                      I don't speak for the USAF or my company
Smash forehead on keyboard to continue...       --Ken Applin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090713222746.5D519BF05>