best practice on local LAN DNS server

psycroptic · 03-09-2014, 04:21 PM

is it best practice to have your local DNS server query the roots directly, or use a forwarder e.g. provided by your ISP, or opendns? or does it not really matter?

Ser Olmy · 03-09-2014, 06:17 PM

Using the root servers is not a good idea and is considered bad form, as they are busy enough as it is.

Whether you want to use the forwarder provided by your ISP or OpenDNS or Google's public servers or something else entirely is entirely up to you. You get to decide who will be allowed to track your Internet activity and implement DNS filtering.

psycroptic · 03-09-2014, 06:23 PM

Quote:

Originally Posted by Ser Olmy

Using the root servers is not a good idea and is considered bad form, as they are busy enough as it is.

this is what i'd suspected

Quote:

Originally Posted by Ser Olmy

You get to decide who will be allowed to track your Internet activity and implement DNS filtering.

And this is why I recently disabled forwarding & started querying directly.... but i suppose it's easy enough for somebody to track this kind of information no matter where your DNS requests are getting sent, if somebody's interested enough