[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ossig] reliable dns server ?



On 12 Apr 2004 at 12:45, Imran William Smith wrote:

> know any better ones?  If I wanted to set up a high volume DNS and make
> it available to others (in my personal capacity, I have spare bandwidth
> and CPU in a US-based server), how do I get permission to query the
> root servers directly?  Or can I only query the hosting provider's DNS
> from my server? 
> 

Most private name servers nowadays wil only allow queries either on 
domains that they are authoritative or from clients on networks 
served by them.

But you can always set up your DNS server to _allow_ an outsider DNS 
client to perform a query on it for general DNS resolution and your 
server can then perfom a _recursive_ query for the request.  It may 
do an iterative query on root servers if needed and then follow up 
with more iterative queries on the appropriate servers as it goes 
through the domain name space till either it receives the info it 
wants (given either by the name server authoritative for the desired 
domain or by a server which has the info in its cache) or it gives up 
with no more servers to query.  (In reality there are more variations 
to this, but this is the general idea.)

More details about how all this works may be read from the classic 
O'Reilly book "DNS and BIND" by Paul Albitz and Cricket Liu available 
online at:

http://www.defcon1.org/e-books/index.htm



---------------------------------------------------------
To unsubscribe: send mail to ossig-request@mncc.com.my
with "unsubscribe ossig" in the body of the message