Im commited now to webmin, I just RTFM the bind module component, no turning back after that kind of investment. Turns out DNS really not a complicated thing at this level of demand
On Fri, Oct 3, 2014 at 12:47 AM, George Skorup (Cyber Broadcasting) via Af < af@afmug.com> wrote: > cPanel is a single machine/VM web hosting platform. About the only thing > that can be clusterized currently with cPanel is DNS, and I don't use it. > Actually, their DNS-ONLY product is free. > > We bought our one-time license in 2002, I want to say it was like $2500. > Then they got rid of the one-time licensing, but ours is grandfathered and > updates cost $180 or $200 a year. Not a bad investment. > > Anyway, I've hand-edited zone files and named.conf using vi since, like.. > forever. It's really not that hard. I wrote some very simple (i.e. crude) > bash scripts that let me easily insert new zones and then restart named. > > On 10/2/2014 10:38 PM, That One Guy via Af wrote: > > is cpane priced per server or does one instance manage multiple servers? > Im not understnading their structure, if we have our two authoritative DNS > servers and add 2 caching servers will that require 4 licenses? at 425 > bucks a year that can add up, or am i misunderstanding their pricing > structure? > > On Thu, Oct 2, 2014 at 10:04 PM, George Skorup (Cyber Broadcasting) via Af > <af@afmug.com> wrote: > >> We've ran cPanel/WHM for almost 12 years now. The customer can do just >> about anything imaginable with it, yet they still call and ask you to do >> even the most simple things for them, like add an email account. ^%&$#! >> >> >> On 10/2/2014 9:37 PM, Ken Hohhof via Af wrote: >> >> If you don’t need paid support from RedHat, CentOS is the way to go, >> it’s the same thing minus the support and branding. >> >> Want a chuckle? Take a look at the Solarwinds management product >> advertised on the ISC website. Probably nothing wrong with the product, >> Solarwinds is a good company. But the price is just ridiculous. It will >> make you happy to use webmin. Honestly I just vi the files manually. But >> you’re not going to get a customer to do that. >> >> Steve, didn’t you say you had cPanel? Doesn’t that include a DNS server >> and management tool, at least for authoritative DNS? >> >> *From:* Josh Baird via Af <af@afmug.com> >> *Sent:* Thursday, October 02, 2014 9:19 PM >> *To:* af@afmug.com >> *Subject:* Re: [AFMUG] DNS server for guys who dont want to be gurus >> >> There probably isn't. Use CentOS. >> >> Josh >> >> On Thu, Oct 2, 2014 at 9:34 PM, That One Guy via Af <af@afmug.com> wrote: >> >>> I dont want bleeding edge, I like stable, and as long as its "secure" I >>> dont like to change. >>> I never had really thought about purchased Linux before, looking at RHEL >>> I have no clue and I dont know that there is much benefit to it with a >>> handful of small single purpose virtual servers >>> >>> On Thu, Oct 2, 2014 at 8:23 PM, Josh Baird via Af <af@afmug.com> wrote: >>> >>>> I don't use webmin, so I can't specifically answer your questions.. >>>> but, yes, Webmin is simply a "front-end" for various services that you have >>>> running on your server. Out of the box, your server is configured to use >>>> specific yum (software) repositories that are specific to CentOS 5/6/7. >>>> Unless you manually update one of these repository definitions or are using >>>> your own local RPM packages, you will be pointing at these native >>>> repositories. CentOS/RHEL repositories maintain the same major version of >>>> package (9.8.2 in EL6, 9.9.4 in EL7) throughout a major version's lifecycle >>>> (ie 6.x, 7.x). RHEL/CentOS backports security patches into older (stable) >>>> versions; so even if you are running RHEL6 with BIND 9.8.2, you are not >>>> vulnerable to security flaws or exploits (as long as you keep your server's >>>> packages up to date). >>>> >>>> CentOS/RHEL is not bleeding edge. They offer stable versions of >>>> software and keep them up to date and safe by backporting security >>>> patches. If you want bleeding edge packages you have a few options - find >>>> third party yum repositories with newer packages, compile your own BIND or >>>> use "non-enterprise" Linux distributions such as Fedora. >>>> >>>> Josh >>>> >>>> On Thu, Oct 2, 2014 at 9:09 PM, That One Guy via Af <af@afmug.com> >>>> wrote: >>>> >>>>> so, webmin, it is just in its most basic form a gui and package >>>>> management system for linux and linux server components?? Is this correct? >>>>> >>>>> When I go to the package manager through webmin is if only looking in >>>>> repositories for packages compiled to run in webmin, or is it looking for >>>>> packages compiled for the underlying linux distibution?? >>>>> >>>>> So if I want to update to the newest fanciest BIND version, how would >>>>> I go about it, yum update bind and the like dont take it any further? If I >>>>> did this outside of webmin, will I lose the webmin functionality or cause >>>>> it not to function? Virtualmin as best i can tell is a module for webmin, >>>>> will this give me better access to newer versions of BIND? I like windows >>>>> because stuff either doesnt work or its got bugs, we get two choices. >>>>> >>>>> It looks like 9.8.8 is EOL last month, so i see what you guys are >>>>> saying about being behind >>>>> 9.9.6 and 9.10.1 are both listed as current and stable, but 9.9.6 >>>>> says Extended Support Version, what does that mean? >>>>> >>>>> On Thu, Oct 2, 2014 at 7:51 PM, That One Guy via Af <af@afmug.com> >>>>> wrote: >>>>> >>>>>> i assume i cant update BIND beyong releases specific to CentOS? >>>>>> >>>>>> On Thu, Oct 2, 2014 at 7:28 PM, Ken Hohhof via Af <af@afmug.com> >>>>>> wrote: >>>>>> >>>>>>> My BIND servers are on 9.10.0-P2. >>>>>>> >>>>>>> *From:* That One Guy via Af <af@afmug.com> >>>>>>> *Sent:* Thursday, October 02, 2014 6:10 PM >>>>>>> *To:* af@afmug.com >>>>>>> *Subject:* Re: [AFMUG] DNS server for guys who dont want to be gurus >>>>>>> >>>>>>> I already have installed bind through webmin, it is a newer >>>>>>> version, just by a couple revisions but the ubuntu one wont update any >>>>>>> more >>>>>>> its BIND version 9.8.2 >>>>>>> I can manually add the slave zone and test the transfer it updates >>>>>>> from the master, I just assumed I should be able to add it as another >>>>>>> slave >>>>>>> and have it populate all the way >>>>>>> >>>>>>> On Thu, Oct 2, 2014 at 5:30 PM, Ken Hohhof via Af <af@afmug.com> >>>>>>> wrote: >>>>>>> >>>>>>>> You need a named.conf that defines the slave zones and the IP >>>>>>>> address of the master. >>>>>>>> >>>>>>>> But first step is to download/compile/install the latest version of >>>>>>>> BIND, it’s actually quite easy. I doubt you can get the version you >>>>>>>> want >>>>>>>> via yum update because CentOS is based on RHEL which is always a few >>>>>>>> steps >>>>>>>> behind. Given the DNS attacks, you want the latest BIND. You might >>>>>>>> then >>>>>>>> want to lock out the package from being updated by yum. >>>>>>>> >>>>>>>> >>>>>>>> *From:* That One Guy via Af <af@afmug.com> >>>>>>>> *Sent:* Thursday, October 02, 2014 4:36 PM >>>>>>>> *To:* af@afmug.com >>>>>>>> *Subject:* Re: [AFMUG] DNS server for guys who dont want to be >>>>>>>> gurus >>>>>>>> >>>>>>>> So Im at a new Centos with webmin fresh bind install. >>>>>>>> We have one master, one slave server >>>>>>>> I have never set up bind, this was done before me. >>>>>>>> If I were to take down the old slave server and bring this one up >>>>>>>> on its IP will the master update this one, or is there a config I need >>>>>>>> to >>>>>>>> move over. Im more comfotable doing the slave first. >>>>>>>> These are all webmin, but the original is ubuntu and the new is >>>>>>>> centos >>>>>>>> >>>>>>>> On Thu, Oct 2, 2014 at 2:00 PM, Paul Stewart via Af <af@afmug.com> >>>>>>>> wrote: >>>>>>>> >>>>>>>>> I always install CentOS bare bones …. “minimal server” is what >>>>>>>>> the installation will call it. This way you can install whatever you >>>>>>>>> like >>>>>>>>> after installation and not worry about removing many dozen packages >>>>>>>>> you >>>>>>>>> don’t need… >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> Just my preference anyways…. >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *That One >>>>>>>>> Guy via Af >>>>>>>>> *Sent:* Thursday, October 02, 2014 2:24 PM >>>>>>>>> *To:* af@afmug.com >>>>>>>>> *Subject:* Re: [AFMUG] DNS server for guys who dont want to be >>>>>>>>> gurus >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> 2 questions in this >>>>>>>>> >>>>>>>>> 1. when running through the current centos installation, what do i >>>>>>>>> select for the server type, for powercode it says select basic server >>>>>>>>> >>>>>>>>> 2. is there a guide for building dedicated centos servers based on >>>>>>>>> server purpose? I assume there are packages I dont need to install if >>>>>>>>> its >>>>>>>>> only got this purpose >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> On Thu, Oct 2, 2014 at 1:13 PM, Paul Stewart via Af <af@afmug.com> >>>>>>>>> wrote: >>>>>>>>> >>>>>>>>> CentOS+BIND+Webmin J I can’t remember but Usermin might be the >>>>>>>>> part you’re looking for specific to users updating their own DNS….. >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> *From:* Af [mailto:af-boun...@afmug.com] *On Behalf Of *That One >>>>>>>>> Guy via Af >>>>>>>>> *Sent:* Thursday, October 02, 2014 1:21 PM >>>>>>>>> *To:* af@afmug.com >>>>>>>>> *Subject:* [AFMUG] DNS server for guys who dont want to be gurus >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> Is there a good, simple package for locally hosted DNS Servers for >>>>>>>>> people like me who dont want to get too far into managing the linux >>>>>>>>> at a >>>>>>>>> granular level? we are used to the webmin interface. It would be nice >>>>>>>>> if it >>>>>>>>> had the option to set up client accounts for some clients to manage >>>>>>>>> their >>>>>>>>> own DNS but not view others, but thats in no way a deal breaker >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> >>>>>>>>> All parts should go together without forcing. You must remember >>>>>>>>> that the parts you are reassembling were disassembled by you. >>>>>>>>> Therefore, if >>>>>>>>> you can't get them together again, there must be a reason. By all >>>>>>>>> means, do >>>>>>>>> not use a hammer. -- IBM maintenance manual, 1925 >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> >>>>>>>>> All parts should go together without forcing. You must remember >>>>>>>>> that the parts you are reassembling were disassembled by you. >>>>>>>>> Therefore, if >>>>>>>>> you can't get them together again, there must be a reason. By all >>>>>>>>> means, do >>>>>>>>> not use a hammer. -- IBM maintenance manual, 1925 >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> All parts should go together without forcing. You must remember >>>>>>>> that the parts you are reassembling were disassembled by you. >>>>>>>> Therefore, if >>>>>>>> you can't get them together again, there must be a reason. By all >>>>>>>> means, do >>>>>>>> not use a hammer. -- IBM maintenance manual, 1925 >>>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> All parts should go together without forcing. You must remember that >>>>>>> the parts you are reassembling were disassembled by you. Therefore, if >>>>>>> you >>>>>>> can't get them together again, there must be a reason. By all means, do >>>>>>> not >>>>>>> use a hammer. -- IBM maintenance manual, 1925 >>>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> All parts should go together without forcing. You must remember that >>>>>> the parts you are reassembling were disassembled by you. Therefore, if >>>>>> you >>>>>> can't get them together again, there must be a reason. By all means, do >>>>>> not >>>>>> use a hammer. -- IBM maintenance manual, 1925 >>>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> All parts should go together without forcing. You must remember that >>>>> the parts you are reassembling were disassembled by you. Therefore, if you >>>>> can't get them together again, there must be a reason. By all means, do >>>>> not >>>>> use a hammer. -- IBM maintenance manual, 1925 >>>>> >>>> >>>> >>> >>> >>> >>> -- >>> All parts should go together without forcing. You must remember that the >>> parts you are reassembling were disassembled by you. Therefore, if you >>> can't get them together again, there must be a reason. By all means, do not >>> use a hammer. -- IBM maintenance manual, 1925 >>> >> >> >> >> > > > -- > All parts should go together without forcing. You must remember that the > parts you are reassembling were disassembled by you. Therefore, if you > can't get them together again, there must be a reason. By all means, do not > use a hammer. -- IBM maintenance manual, 1925 > > > -- All parts should go together without forcing. You must remember that the parts you are reassembling were disassembled by you. Therefore, if you can't get them together again, there must be a reason. By all means, do not use a hammer. -- IBM maintenance manual, 1925
