Hello,

I am about to setup a DNS server for my network. I currently have a network behind an iptables router/firewall. I plan to add web and mail services to my network soon and need a nameserver to resolve domains for those two services. My question is this......

Should I assign the DNS server a local IP and have the router/firewall forward DNS requests from the internet to this box, or should I just assign a public IP straight to the DNS server and use iptables on it to block all traffic to it except DNS traffic?

Thanks in advance for any advice you can offer.

One vote for behind the firewall. It will give you the oportunity to do some fine-grain iptables firewalling at the dns- you could also do dhcp and other goodies on it. Samba wins, time server, samba time, etc...

Its kinda nice to keep internal network stuff on a dedicated box, and gateway/firewall stuff at the gateway. Personal choice.




dan