Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
linux:bind [2011/08/01 13:31]
193.164.137.40 [audit dns]
linux:bind [2015/08/12 10:53]
zagi
Line 1: Line 1:
 ====== BIND (is there anyting else?) ====== ====== BIND (is there anyting else?) ======
 +
 ==== DNSSEC ==== ==== DNSSEC ====
  
Line 5: Line 6:
 To enable add to bind.named.options:\\ To enable add to bind.named.options:\\
  
-dnssec-enable yes;\\ + 
-dnssec-validation yes;\\ +  dnssec-validation auto;\\ 
-dnssec-lookaside . trust-anchor dlv.isc.org.;\\+  dnssec-enable yes;\\ 
 +  dnssec-lookaside auto;\\ 
 + 
  
  
-include "/etc/bind/trusted.key"; 
  
 https://www.dns-oarc.net/files/odvr/configs/bind/trusted-keys.conf\\ https://www.dns-oarc.net/files/odvr/configs/bind/trusted-keys.conf\\
Line 18: Line 21:
         category dnssec { null;};};\\         category dnssec { null;};};\\
  
-==== Speedup tips ==== 
- 
-  > I have built a local DNS server bind (Debian Sarge).The DNS should 
-  > accelerate DNS look ups by LAN clients. 
-  > But Now, in contrary the local dns is slower than a custom DNS by my 
-  > webhoster :-( 
-   
-  You should use BIND 9, disable lookups over IPv6 (OPTIONS="-u bind -4" 
-  in /etc/defaults/bind9), and you need to wait a bit until the local 
-  cache has been filled. 
  
 ==== Letting bind/named query a specific DNS server for only one specific domain ==== ==== Letting bind/named query a specific DNS server for only one specific domain ====
Line 65: Line 58:
  
 and changed this line: and changed this line:
-</code>+<code>
 /etc/bind/** r, /etc/bind/** r,
 </code> </code>
linux/bind.txt · Last modified: 2015/08/12 14:46 by zagi
CC Attribution-Share Alike 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0 ipv6 ready