[Techtalk] Slow DNS

Devdas Bhagat devdas at dvb.homelinux.org
Tue Oct 12 23:05:24 EST 2004


On 12/10/04 17:17 +0100, David Sumbler wrote:
> On Tue, 12 Oct 2004, Devdas Bhagat wrote:
> 
> > On 12/10/04 12:45 +0100, David Sumbler wrote:
> > One little trick that I would recommend is to run your own caching
> > resolver. Use the listen-on directive of BIND to restrict the lookups to
> > your loopback interface, and use 127.0.0.1 as the nameserver entry in
> > resolv.conf.
> >
> > options {
> > 	directory "/var/named";
> > 	listen-on {
> > 		127.0.0.1;
> > 	};
> > };
> >
> > logging {
> > 	category "lame-servers" {
> > 		"null";
> > 	};
> > };
> >
> > zone "." IN {
> > 	type hint;
> > 	file "named.ca";
> > };
> 
> This sounds a great idea in principle, but as I have no experience of
> BIND (and only a vague idea of what it is) I think this is a little
> impractical at present for me.  I don't even know what I'm supposed to
> do with the above script!

This is a simple config file for BIND. If you install the caching
nameserver RPM (that is what it was in RH days), you should have a file
/etc/named.conf
The default file is
options {
	directory "/var/named";
};

zone "." IN {..

The listen-on directive tells named to listen only to the loopback
address, where is it quite safe from prying folks on the network.

Lame servers are misconfigured servers that BIND detects. In this day
and age, lame server logging is just so much noise, that it is worth
turning it off.

Devdas Bhagat


More information about the Techtalk mailing list