Re: Bind or Djbdns

2006-04-10 Thread Lars Hansson
On Tuesday 11 April 2006 00:51, Joco Salvatti wrote:
> I'd like to know your opinion about to major DNS servers: Bind and
> djbdns. Which one is the best (I'm not sure if I may ask it this way)?

That depends on your metric for "best".

> Which one you'd best recommend?
Im happy with djbdns since many years.

> I've already used Bind (and I still 
> use it) and I know it works perfectly fine.

If you're comfortable with BIND and it works for you there's not much reason 
to change. Of course, you could always give djbdns a spin and see if you like 
it better. The only way to find out which is "best" is to try them both for a 
period of time.

---
Lars Hansson



Re: Bind or Djbdns

2006-04-10 Thread JR Dalrymple

Start here:

http://www.openbsd.org/faq/faq1.html#HowAbout

Joco Salvatti wrote:


Hi all,

I'd like to know your opinion about to major DNS servers: Bind and
djbdns. Which one is the best (I'm not sure if I may ask it this way)?
Which one you'd best recommend? I've already used Bind (and I still
use it) and I know it works perfectly fine. But before getting in
touch with OpenBSD and their users I realized that I had an wrong
opinion about a lot of softwares. So I'd like to know your opinion.

P.S. My intention is not starting a flamed discussion or even an
argument. I just want to know your opinion about this issue.

Thanks

--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://salvatti.expert.com.br
e-mail: [EMAIL PROTECTED]




Re: Bind or Djbdns

2006-04-10 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] 
> I'd like to know your opinion about to major DNS servers: Bind and
> djbdns. Which one is the best (I'm not sure if I may ask it this way)?

You may, but it's not a good line of questioning. There is no "best" as this
is a matter for subjective debate. It is a fruitless question that can end
up yielding nothing meaningful in the end.

> Which one you'd best recommend?

Use the one that fits your needs best. With BIND, you'll have it included on
OpenBSD which means less work for you and you can have some assurance that
security incidents will be responded to properly and in the scope of your OS
(will probably be even less frequent than the stock named from upstream).
BIND hasn't had the number of security issues in recent times that it has
had in the past. OTOH, I'm not aware of any security issues in stock djbdns,
period. 

Give both a try and determine for your own self which is the "best" for you.

DS



Re: Bind or Djbdns

2006-04-10 Thread João Salvatti
Tanks for all!

On 4/10/06, Obi Okeke <[EMAIL PROTECTED]> wrote:
> Hi Joco,
> Personally, I would VERY highly recommend DJBDNS for
> DNS and also Qmail for Email Servers.  I've used both
> on multiple servers for 7 years straight and NEVER
> EVER had one single issue - no security hacks and no
> performance issues just rock solid performance always.
>   DJBDNS and Qmail by Dan Bernstein is THE BEST in my
> opinion.  My understanding is that Theo and the
> OpenBSD team removed DJBDNS and Qmail from the ports
> because Dan Bernstein does not have a fully free and
> unrestricted license, which I can understand does not
> fit the OpenBSD philosophy, ideals and project goals.
> Regardless, I go with what's best and DJBDNS and Qmail
> are the best hands down in my opinion. Like OpenBSD,
> it just works, period.  Look at the recent Sendmail
> security issue which is just one of MANY over the
> years while Qmail to my knowledge NEVER EVER had one
> single issue - it is truely rock solid (just like
> OpenBSD).  I have saved my self MANY headaches and I
> have watched othe Sys Admins struggle year in and year
> out with M$ email systems and Sendmail systems.
>
> --- Joco Salvatti <[EMAIL PROTECTED]> wrote:
>
> > Hi all,
> >
> > I'd like to know your opinion about to major DNS
> > servers: Bind and
> > djbdns. Which one is the best (I'm not sure if I may
> > ask it this way)?
> > Which one you'd best recommend? I've already used
> > Bind (and I still
> > use it) and I know it works perfectly fine. But
> > before getting in
> > touch with OpenBSD and their users I realized that I
> > had an wrong
> > opinion about a lot of softwares. So I'd like to
> > know your opinion.
> >
> > P.S. My intention is not starting a flamed
> > discussion or even an
> > argument. I just want to know your opinion about
> > this issue.
> >
> > Thanks
> >
> > --
> > Joco Salvatti
> > Undergraduating in Computer Science
> > Federal University of Para - UFPA
> > web: http://salvatti.expert.com.br
> > e-mail: [EMAIL PROTECTED]
> Tired of spam?  Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>


--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://salvatti.expert.com.br
e-mail: [EMAIL PROTECTED]



Re: Bind or Djbdns

2006-04-10 Thread David Terrell
On Mon, Apr 10, 2006 at 01:51:29PM -0300, Jo?o Salvatti wrote:
> P.S. My intention is not starting a flamed discussion or even an
> argument. I just want to know your opinion about this issue.

When you ask for opinions, they become heated.  Had you done your
basic homework and looked up previous discussions in the archives
of this mailing list, you would know that.

Second, it's a silly question.  OpenBSD ships with bind9.
djbware isn't in ports.  If you want general opinions on DNS
tools, go ask on DNS- related mailing lists; or, better yet,
read about the two tools and make your own educated decision.



Re: Bind or Djbdns

2006-04-10 Thread Stuart Henderson
On 2006/04/10 13:51, Joco Salvatti wrote:
> I'd like to know your opinion about to major DNS servers: Bind and
> djbdns. Which one is the best (I'm not sure if I may ask it this way)?

'best' means nothing without asking what they're best for.

djbdns is pretty good at some things and terrible at others.
Same for BIND. nsd and MaraDNS are other alternatives which
are worth a look; MaraDNS has several goals in common with
djbdns (security and low-resource use) but is less quirky;
nsd is an authoritative-only server using standard BIND-
style zone files which performs well (RIPE use it for the
k.root-servers.net instances) and is easy to configure.



Re: Bind or Djbdns

2006-04-10 Thread Eric Pancer
On Mon, 2006-04-10 at 13:51:29 -0300, Joco Salvatti proclaimed...

> I'd like to know your opinion about to major DNS servers: Bind and
> djbdns. Which one is the best (I'm not sure if I may ask it this way)?
> Which one you'd best recommend? I've already used Bind (and I still
> use it) and I know it works perfectly fine. But before getting in
> touch with OpenBSD and their users I realized that I had an wrong
> opinion about a lot of softwares. So I'd like to know your opinion.

I'll say one thing about BIND; it's come a very long way in the past few
years. Using "views" really offers a lot of flexibility, and native IPv6 is
also something that prompted me to start using it again. 

While djb's software is very fast and resilient, I couldn't find a reason to
add more complexity to my system. Also, I prefer the query logs that BIND
gives you, and there's more software available to eat those logs and report
back.

But hey, don't let me persuade you. Try them out yourself, side by side, and
see which one you like. dnscache/tinydns *are* much faster (from my tests),
on the order of 3x's faster than BIND. But there's just less benefits.

YMMV.

- eric



Bind or Djbdns

2006-04-10 Thread João Salvatti
Hi all,

I'd like to know your opinion about to major DNS servers: Bind and
djbdns. Which one is the best (I'm not sure if I may ask it this way)?
Which one you'd best recommend? I've already used Bind (and I still
use it) and I know it works perfectly fine. But before getting in
touch with OpenBSD and their users I realized that I had an wrong
opinion about a lot of softwares. So I'd like to know your opinion.

P.S. My intention is not starting a flamed discussion or even an
argument. I just want to know your opinion about this issue.

Thanks

--
Joco Salvatti
Undergraduating in Computer Science
Federal University of Para - UFPA
web: http://salvatti.expert.com.br
e-mail: [EMAIL PROTECTED]