Hi there,

Just a general question (I hope this is the right section, if not please feel free to move this topic lol).

I am just about to undergo a new peice of freelance work myself on Bind 9, but it has been ages since I have done this, this was on my own LAN with port 53? Blocked from outside, so mine is not public facing.

But this project is, what should I setup to make this truely secure, just to recap on my thoughts aswell, forward resolving is Domain -> IP is not it? Then Reverse is IP->Domain is not it?

However my more obvious concern is to make this as secure as possible!

Thanks,
Jeremy.

Probably time to recap - http://zytrax.com/books/dns/

cheers

Greetingz!

I've worked with (and had to setup) several DNS configurations, and let me tell you; the best damn book there is out there for just what you're looking for is O'Reilly's "DNS & Bind". Bear in mind, when I was doing it, the 2nd Edition had just come out, so it's been a while for me, too.

Obligitory Amazon Link

Now, you might want to consider setting up a "bastion host". That term is documented pretty well out there (sometimes you just need to know what to google).

1 members found this post helpful.

Ah wonderful, will read that then.

Thanks ever so much for your advice!

Jeremy.