Re: Should DNS be on same server as webserver?

2009-07-14 Thread Ruben de Groot
On Tue, Jul 14, 2009 at 12:46:43AM -0400, Steve Bertrand typed: John Almberg wrote: On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: You can fix the security problems by dumping Bind and using djbdns. What security problems? This one ? :) http://blogs.zdnet.com/security/?p=2812 I

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Peter Boosten
Ruben de Groot wrote: On Tue, Jul 14, 2009 at 12:46:43AM -0400, Steve Bertrand typed: John Almberg wrote: On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: You can fix the security problems by dumping Bind and using djbdns. What security problems? This one ? :)

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Steve Bertrand
Peter Boosten wrote: Ruben de Groot wrote: On Tue, Jul 14, 2009 at 12:46:43AM -0400, Steve Bertrand typed: John Almberg wrote: On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: You can fix the security problems by dumping Bind and using djbdns. What security problems? This one ? :)

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Peter Boosten
Steve Bertrand wrote: I like whatever works in regards to the situation I'm facing ;) And that's the best possible reason one could have! ;-) Peter -- http://www.boosten.org ___ freebsd-questions@freebsd.org mailing list

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Karl Vogel
On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: K You can fix the security problems by dumping Bind and using djbdns. On Tue, 14 Jul 2009 10:16:24 +0200, Ruben de Groot replied: R What security problems? This one ? :) R http://blogs.zdnet.com/security/?p=2812 When BIND offers (and makes good

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Jon Radel
Karl Vogel wrote: On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: K You can fix the security problems by dumping Bind and using djbdns. On Tue, 14 Jul 2009 10:16:24 +0200, Ruben de Groot replied: R What security problems? This one ? :) R http://blogs.zdnet.com/security/?p=2812 When BIND

Re: Should DNS be on same server as webserver?

2009-07-14 Thread Mel Flynn
On Monday 13 July 2009 14:27:46 Karl Vogel wrote: It's very easy to set up a caching nameserver without using all the memory on your system. It's much easier to turn your HIGH-performance webserver into a slug, by running stuff you don't need on the same machine. Memory unused by the

Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done locally. This makes sense to me, but I wonder if the

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Bill Moran
In response to John Almberg jalmb...@identry.com: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Jon Radel
John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done locally. This makes sense to me,

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Mikel King
On Jul 13, 2009, at 12:36 PM, John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Jerry McAllister
On Mon, Jul 13, 2009 at 12:36:42PM -0400, John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead,

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Mel Flynn
On Monday 13 July 2009 08:36:42 John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups over the network. Instead, they are done

Re: Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
On Jul 13, 2009, at 3:05 PM, Mel Flynn wrote: On Monday 13 July 2009 08:36:42 John Almberg wrote: The other day, a FreeBSD 'expert' told me that it is important to have the DNS server for a domain on the same server as the domain's web server. Supposedly, this saves doing tons of DNS look ups

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Karl Vogel
On Mon, 13 Jul 2009 13:03:24 -0400, Jon Radel j...@radel.com said: J Apache and Bind have both had their security issues over the years, and J there's something to be said for running them on different servers to J reduce both the all eggs in one basket factor and the ease of J spreading an

Re: Should DNS be on same server as webserver?

2009-07-13 Thread John Almberg
On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: On Mon, 13 Jul 2009 13:03:24 -0400, Jon Radel j...@radel.com said: J Apache and Bind have both had their security issues over the years, and J there's something to be said for running them on different servers to J reduce both the all eggs

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Steve Bertrand
John Almberg wrote: On Jul 13, 2009, at 6:27 PM, Karl Vogel wrote: On Mon, 13 Jul 2009 13:03:24 -0400, Jon Radel j...@radel.com said: J Apache and Bind have both had their security issues over the years, and J there's something to be said for running them on different servers to J

Re: Should DNS be on same server as webserver?

2009-07-13 Thread Steve Bertrand
Steve Bertrand wrote: [...snip...] There is a single file in /etc/dnscache/root/ip, named 127.0.0.1 If you want this cache to serve internal /24 network queries: % touch /etc/dnscache/root/ip/192.168.0 Need to add some clarification: Adding the new empty file permits queries from the IP