What do you do for DNS on your network?

timetraveler · 03-12-2011, 11:54 AM

If you know which DNS package you use post it here.

timetraveler · 03-12-2011, 11:59 AM

I am using powerdns.

corp769 · 03-12-2011, 11:59 AM

I use openDNS, not my ISP's. You should throw that in your poll

timetraveler · 03-12-2011, 12:13 PM

Can't figure out how to edit the poll.

corp769 · 03-12-2011, 12:18 PM

I think you need to get with jeremy in order to edit the poll.

salasi · 03-12-2011, 01:58 PM

You didn't ask, but, for what its worth I use DJBDNS.

vtel57 · 03-12-2011, 02:03 PM

Another OpenDNS user here.

timetraveler · 03-14-2011, 03:00 PM

Sent a message to admin and asked to add one more option to poll. "I use Opendns or easydns or some third party DNS."
salasi, I did ask to include which DNS you're using,thanks. Do you have your djbdns patched up?
Have you looked at dnscurve?

zootboy · 03-15-2011, 08:34 PM

I use my ISP's DNS, and I absolutely HATE any sort of hijacking. I refuse to use OpenDNS because of that. If they offered a way to opt-out of NXDOMAIN hijacking, I would gladly use them.

Sometimes, I also use Google DNS. (8.8.8.8 might just be the coolest DNS server address ever.)

Skaperen · 03-16-2011, 10:14 AM

nsd for authoritative on the WAN side, bind for cache (with some LAN hosts added in a couple zone files) on the LAN side (it hits the WAN side, but cannot be queried from the WAN side).

timetraveler · 03-16-2011, 03:51 PM

FWIW, can't get the additional poll question added. Seems like there should be a poll edit feature. At least have one during the first hour of the poll or so.

I didn't know opendns did nxdomain hijack. Too bad.

zootboy · 03-16-2011, 05:45 PM

Yeah, it's the only fault I can find with them. It's just such a big deal for me, that one flaw's the deal-breaker.

frankbell · 03-16-2011, 08:15 PM

I answered, "I use my ISP's DNS and I do not like NXDOMAIN hijacking." The hijacking is annoying but nothing more and quick like a bunny I just close the page.

After reading the responses, though, I'm going to look into this OpenDNS thing.

zootboy · 03-16-2011, 08:46 PM

It messed with my spam filter, which did some lookups on IPs to try and detect emails coming from zombie SMTP servers.

I also noticed that Tor had to include some funky testing to detect these sorts of hijacks. My log file used to always get a few lines like "DNS query nsjnbjsbsjbjs.invalid and 6 other attempts all returned 1.2.3.4. Assuming DNS redirecting is in use, blacklisting 1.2.3.4." That kind of thing just bothers me.

haper · 04-19-2011, 01:36 AM

I use my ISP's DNS and I do not like NXDOMAIN hijacking.