From owner-freebsd-questions  Mon Dec 17  9:39:58 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.utexas.edu (wb1-a.mail.utexas.edu [128.83.126.134])
	by hub.freebsd.org (Postfix) with SMTP id 3A82E37B503
	for <freebsd-questions@freebsd.org>; Mon, 17 Dec 2001 09:39:42 -0800 (PST)
Received: (qmail 13827 invoked by uid 0); 17 Dec 2001 17:39:41 -0000
Received: from chepe.cc.utexas.edu (HELO oscar.mail.utexas.edu) (128.83.135.25)
  by umbs-smtp-1 with SMTP; 17 Dec 2001 17:39:41 -0000
Message-Id: <5.1.0.14.2.20011217113556.00ab9038@mail.utexas.edu>
X-Sender: oscars@mail.utexas.edu
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Mon, 17 Dec 2001 11:37:42 -0600
To: freebsd-questions@freebsd.org
From: Oscar Ricardo Silva <oscars@mail.utexas.edu>
Subject: Re: "private" DNS by-passing my ISPs? (Was: Re: /etc/hosts...)
In-Reply-To: <20011217110549.A72363@tharmas.rintrah.org>
References: <Pine.GSO.4.31.0112171335110.10975-100000@mail.ilrt.bris.ac.uk>
 <20011217143137.A13740@foo31-249.visit.se>
 <Pine.GSO.4.31.0112171335110.10975-100000@mail.ilrt.bris.ac.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

At 11:05 AM 12/17/2001 -0500, devin-freebsdquestions@rintrah.org, you wrote:
>On Mon, Dec 17, 2001 at 01:41:04PM +0000, Jan Grant wrote:
> > On Mon, 17 Dec 2001, Martin Karlsson wrote:
> >
> > > Any particular pitfalls I should avoid when setting one up? A link to a
> > > good tutorial? Everything is welcome...
> >
> > Ironically,
> >       http://www.linuxdoc.org/HOWTO/DNS-HOWTO-3.html
> > looks reasonable. I'm also given to understand that djbdns works well in
> > this regard; it's also odds-on to have fewer security concerns than
> > ISC's bind :-/
>
>[snip]
>
>djbdns has 2 parts:
>
>one is a caching name server called dnscache. All this
>program does is query the root servers and cache responses.
>
>I've always found this perfect for my needs, and there's no need to
>learn the complexities of bind configuration. And you can install it from
>ports.


Another great thing about dnscache is that for a particular domain, you can 
have all queries for that domain go to specific nameservers.  So for 
example, you can have all queries in your ISPs domain go to their 
nameservers, but all others go to the root servers.


Oscar


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message