Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
linux:bind [2011/08/01 13:31]
193.164.137.40 [audit dns]
linux:bind [2015/08/12 10:53]
zagi
Line 1: Line 1:
 ====== BIND (is there anyting else?) ====== ====== BIND (is there anyting else?) ======
 +
 ==== DNSSEC ==== ==== DNSSEC ====
  
Line 5: Line 6:
 To enable add to bind.named.options:\\ To enable add to bind.named.options:\\
  
-dnssec-enable yes;\\ + 
-dnssec-validation yes;\\ +  dnssec-validation auto;\\ 
-dnssec-lookaside . trust-anchor dlv.isc.org.;\\+  dnssec-enable yes;\\ 
 +  dnssec-lookaside auto;\\ 
 + 
  
  
-include "/etc/bind/trusted.key"; 
  
 https://www.dns-oarc.net/files/odvr/configs/bind/trusted-keys.conf\\ https://www.dns-oarc.net/files/odvr/configs/bind/trusted-keys.conf\\
Line 18: Line 21:
         category dnssec { null;};};\\         category dnssec { null;};};\\
  
-==== Speedup tips ==== 
- 
-  > I have built a local DNS server bind (Debian Sarge).The DNS should 
-  > accelerate DNS look ups by LAN clients. 
-  > But Now, in contrary the local dns is slower than a custom DNS by my 
-  > webhoster :-( 
-   
-  You should use BIND 9, disable lookups over IPv6 (OPTIONS="-u bind -4" 
-  in /etc/defaults/bind9), and you need to wait a bit until the local 
-  cache has been filled. 
  
 ==== Letting bind/named query a specific DNS server for only one specific domain ==== ==== Letting bind/named query a specific DNS server for only one specific domain ====
linux/bind.txt · Last modified: 2015/08/12 14:46 by zagi
CC Attribution-Share Alike 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0 ipv6 ready