bind has too many settings and is far too confusing to setup manage and run....
it should be simple, a central configuration file... options to save cache across reboots, and how long to hold the cache for.... (my dig 10 minutes after a dig at google shows 40 ms instead of 0 again....) option to enable dns info forwarding.... a file to add DNS addresses to pull from and preferencial order.... file to add information about local network hosts.... (hostA 192.168.1.2 hostB 192.168.1.3......) less gears of the machine in the users face, more straight forward options...
tutorials for caching name server... tutorials for forwarding local name server to the net....
current bind config has garbage like this in it....
Code:
acl "xfer" {
/* Deny transfers by default except for the listed hosts.
* If we have other name servers, place them here.
*/
none;
};
instead of "transfer=yes #allow transfers to hosts in acessctl.lst" type options
the more garbage like that in a config, the more likely misconfigured, misconfigurations lead to insecurity, and to getting hacked.
i would post this on the bind forum on isc, but its so locked down and confusing im not going to waste my time.
id like to be able to have my bind forward the stale information quickly, as it updates in the background.... not
dig google.com Query time: 53 msec and then dig google.com Query time: 1 msec
