This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Best DNS

Is it best to let the astaro box look up root dns information. Or rely on a external 3d party DNS server? Or possibly even use a internal one. Reson I ask is the root dns servers are more trusted.

This thread was automatically locked due to age.

0 TheDrew over 12 years ago

Normally you'd want to use either your ISP's DNS servers or trusted 3rd parties like google. Directly querying the root servers is generally considered in bad taste unless you run a large caching server for your organization.

There is advice about DNS best practices floating around the forums, among them here
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago

OpenDNS is good, and they offer some free filtering and malware protection.

Google has a tool (namebench) to test DNS server latency, to aid finding a quick resolver.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 eganders_01 over 12 years ago in reply to TheDrew

Normally you'd want to use either your ISP's DNS servers or trusted 3rd parties like google.

There was a thread not too long ago that discussed the virtues of using your own ISP's DNS, vs a large external provider like Google or OpenDNS. The reason being that some commercial anti-SPAM databases, such as SpamHaus will not give you accurate anti-SPAM info if the query emanates via the external providers.

If you want more info, read starting with post #47 in the following thread...https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/21312
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

Depends on your ISP. Cox and others do DNS hijacking, and that causes false negatives for rDNS. OpenDNS doesn't - we have several customers using it, and haven't seen the issue discussed in the thread you linked to Eric.

Cheers - Bob

Sorry for any short responses! Posted from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael3245 over 12 years ago

Yes that sucks alot of DNS providers are doing hijacking really.
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael3245 over 12 years ago

is DNS Advantage any good using it right now not sure. Would like others views before I try to switch over to opendns
Cancel
Vote Up 0 Vote Down

Cancel
0 woodrowbone over 12 years ago in reply to Michael3245

Why not try Norton DNS, then you get a free malware/phishing check or even parental check if you like.

https://dns.norton.com/dnsweb/huConfigureRouter.do

Works great on my Sophos box.

Cheers

/W
Cancel
Vote Up 0 Vote Down

Cancel
0 AngeloC over 12 years ago

Googles DNS is so fast, its totally worth it.
8.8.8.8
8.8.4.4

Considering making that the default in the product to start (removes a lot of troubles people have when starting up their UTM for the first time, and never bothering to configure new DNS or relying on shoddy ISP DNS servers. Thoughts? (can always change them of course)
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael3245 over 12 years ago

Or level 3 dns servers work great to. Or could use the root dns servers right?

Sent from my DROID BIONIC using Astaro.org
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 12 years ago in reply to Michael3245

Or could use the root dns servers right?

You could, but you shouldn't... it's very bad net etiquette, and it's very likely to be much slower than a good resolver such as OpenDNS or GoogleDNS, as several queries have to be made for each 'lookup'.

Barry
Cancel
Vote Up 0 Vote Down

Cancel