Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Feb 2000 23:56:56 +0100
From:      "Leif Neland" <leifn@neland.dk>
To:        "wellsian" <wellsian@caffeine.com>, "James Wyatt" <jwyatt@rwsystems.net>
Cc:        "Gene Harris" <zeus@tetronsoftware.com>, "David A. Gobeille" <dgobe@mcs.net>, <freebsd-isp@FreeBSD.ORG>
Subject:   Re: DSL firewall and DNS
Message-ID:  <03de01bf75ac$918991c0$0e00a8c0@neland.dk>
References:  <Pine.BSF.4.21.0002121023510.40808-100000@boris.netgate.net>

index | next in thread | previous in thread | raw e-mail

You won't be misrepresenting the primary/secondary relationship, as you are never presenting this to the world anyway.

Primary/secondary is a purely administatively distinction, which has nothing to do with which nameservers you present to the world. The primary is just the one you are maintaning your zone file on; the world has no way of knowing (or at least cares not about) which one it is.

You could even have only the secondaries listed and online, as long as your primary is online once in a while to keep the secondaries knowing the zone is still valid.

 

> This is exactly what I've wanted to do for a couple installations, but I
> haven't felt secure about misrepresenting the primary/secondary
> relationship. Are there any technical reasons not to do what James
> suggests?
> 
> Thanks,
> Dave
> 
> On Sat, 12 Feb 2000, James Wyatt wrote:
> 
> > On Sat, 12 Feb 2000, Gene Harris answered David A. Gobeille's DSL/DNS
> > questions with:
> > [ ... ]
> > > Now that I have a better idea about your service, you'll be
> > > a lot better off letting the isp be your 2nd DNS server.
> > > That way, if your machine blows up, folks can still view
> > > your web site, send you email, etc.
> > 
> > Or have your ISP secondary from your primary DNS server on your DSL and
> > put their servers on the InterNic records... You will also have fewer
> > folks trying to hack your primary DNS server when it isn't listed. 8{)
> > 
> > It lets you update easily while providing more reliable and faster DNS
> > host. (Not to knock your host, but the link adds a hop or two, a dozen or
> > so mS, and more pieces) Always reduce the path to DNS servers... - Jy@
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?03de01bf75ac$918991c0$0e00a8c0>