[NTLUG:Discuss] opinions on where to run DNS server..... firewall vs main server.

[Jonathan Miller]

Well if you are only going to be using it to look up address then by all
means put it on the inside of the firewall. That is of course if when you
say firewall you mean firewall and not router (which a surprising number
of people do). If you expect people to actually be able to reach the box
from the outside world to resolve domains that you are in charge of you'll
need to keep it visible to the network. 

DNS is a very light chore, so I wouldn't worry about putting it on the
486.

However, even if you really want to set up the DNS machine on the other
side of the fire wall, don't. UDP is a royal pain in the ass to police
with ipchains. And if you're doing masq'ing then your SOL anyhow.

Hope my rambles provide a little bit of insight.

-- Jonathan

On Tue, 29 Feb 2000, clyde swann wrote:

> i had started setting up dns to run on my firewall/gateway/router machine 
> (486dx2/66, 32mg ram, linux v6.0), connected to adsl line with static ip.  
> then i read something that suggested the dns server is expected to be run on 
> the main server (pii-450, 192mg ram, linux v6.1).  just curious as to the 
> assumption, other than it being a server program.  are there any real 
> pros/cons?
> 
> ______________________________________________________
> Get Your Private, Free Email at http://www.hotmail.com
> 
> 
> _______________________________________________
> http://ntlug.org/mailman/listinfo/discuss
>