On Wed, Mar 26, 2014 at 12:16:50PM -0500, deoren wrote:
> >I use powerdns recursor locally on my MX. It is designed for, targeted
> >at, extremely high volume query loads, e.g. ISP environments, thus
> >logging such failures would be useless due to the sheer volume. Think
> >web pages containing multiple broken/dead links, then multiply times
> >millions of page loads per day.
>
> Thanks for the recommendation and thanks also for confirming that it seems
> to be a widespread thing. I'll look into powerdns recursor requirements and
> give it a spin.
You probably don't need a particularly exotic recursive nameserver.
Ones that are optimized for performance, may not be optimized for
security. If you want something other than BIND consider "unbound".
--
Viktor.