From: Noel Jones (njonesmegan.vbhcs.org)
Date: Thu Dec 13 2007 - 17:15:24 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Victor Duchovni wrote:
> On Thu, Dec 13, 2007 at 05:01:30PM -0600, Noel Jones wrote:
>
>> Paul Rogers wrote:
>>> --- mouss <mlist.onlyfree.fr> wrote:
>>>> don't use your ISP as a forwarder. configure a "standalone" dns
>>>> server and try again.
>>> Meaning I have to install bind-8.2.1? I've been afraid of bind
>>> over it's reputation. Is it safe?
>>>
>> Bind 8.2.1 isn't safe.
>> If you don't want to install bind, I've had pretty good luck
>> using OpenDNS as the dns resolver on some small systems.
>>
>> To use OpenDNS with a mail server, you *must* register for a
>> free account with them and disable their "typo correction"
>> feature. If you're on a dynamic IP you will also need to
>> configure inadyn on your server to update opendns' idea of
>> your current IP (instructions on their site).
>>
>> http://www.opendns.com
>
> They provide "helpful" answers for non-existent domains, this practice
> makes me very reluctant to recommend their service for production DNS use
> (especially with MTAs). Has this changed?
>

That's why one *must* turn off their "typo correction"
feature, after which their service acts as a normal resolver
with NXDOMAIN returned when appropriate.

After that, it has been quite satisfactory for a small MTA.

--
Noel Jones

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]