[linux-help] Re: Firewalls and bind

[Jonathan Hall <jonhall@xxxxxxxxxxxxxxxxxxxxx>]

Setting up bind as a caching-only name server is very simple.  The Debian
configuration allows for this with the default configuration script.  I
imagine RH or nearly any other distribution would do the same.  If not, you
can do it by hand very easily, too--just spend 5 minutes reading bind
documentation to see how :-)

As for firewalling... Why bother? :-)  I'm not __aware__ of any security
issues with bind that would jeapordize your system.  Although I don't
necissarily keep up on all those issues.  Someone might be able to retrieve
cached information from your name server!! :-)


On Tue, Oct 17, 2000 at 05:49:09PM -0500, james l wrote:
> I would like to set up bind, as a caching only nameserver. However, as bind
> is typically a weak spot in security, I would like to firewall off the port
> except for a few computers. I already have the bind setup (and it has
> worked). It is on a 2.2 kernel.
> 
> What I would like to know is either:
> 
> 1. What the commands are to do this (I am lazy)
> 2. What port named (bind) runs on. I haven't been able to find what it is. 
> (but likely you are too)
> 
> James L.
> 
> 
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi

--
'640K ought to be enough for anybody.' - Bill Gates, 1981
--
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Jonathan Hall  *  jonhall@xxxxxxxxxxxx  *  PGP public key available
 Systems Admin, Future Internet Services; Goessel, KS * (316) 367-2487
         http://www.futureks.net  *  PGP Key ID: FE 00 FD 51
                  -=  Running Debian GNU/Linux  =-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi