mesmo BIND com diferente respostas. WAS: [GTER] Dois Links redundantes

[Luis Nogueira]

Hello Danton,

Friday, August 6, 2004, 2:32:12 PM, you wrote:

DN> Return-Path: <gter-bounces at eng.registro.br>
DN> Delivered-To: listas at list.intermail.com.br
DN> Received: (qmail 31215 invoked by uid 8900); 6 Aug 2004 17:32:21 -0000
DN> Delivered-To: eng.registro.br-luis.nogueira at list.intermail.com.br
DN> Received: (qmail 31209 invoked by uid 8911); 6 Aug 2004 17:32:21 -0000
DN> Received: from gter-bounces at eng.registro.br by manet by uid 8900 with qmail-scanner-1.22
DN>  ( Clear:RC:0(200.160.7.130):. 
DN>  Processed in 0.297302 secs); 06 Aug 2004 17:32:21 -0000
DN> Received: from unknown (HELO eng.registro.br) (200.160.7.130)
DN>   by 0 with SMTP; 6 Aug 2004 17:32:20 -0000
DN> Received: from eng.registro.br (localhost [127.0.0.1])
DN>         by eng.registro.br (Postfix) with ESMTP
DN>         id 5611ACB; Fri,  6 Aug 2004 14:32:16 -0300 (BRT)
DN> X-Original-To: gter at eng.registro.br
DN> Delivered-To: gter at eng.registro.br
DN> Received: from quantum.inexo.com.br (quantum.inexo.com.br [200.231.48.33])
DN>         by eng.registro.br (Postfix) with ESMTP id AEC6572
DN>         for <gter at eng.registro.br>; Fri,  6 Aug 2004 14:32:13 -0300 (BRT)
DN> Received: from quantum.inexo.com.br (danton at localhost [127.0.0.1])
DN>         by quantum.inexo.com.br (8.12.9/8.11.2) with ESMTP id i76HWCUg001060
DN>         for <gter at eng.registro.br>; Fri, 6 Aug 2004 14:32:13 -0300
DN> Received: from localhost (danton at localhost)
DN>         by quantum.inexo.com.br (8.12.9/8.12.8/Submit) with ESMTP id
DN>         i76HWCjV001057
DN>         for <gter at eng.registro.br>; Fri, 6 Aug 2004 14:32:12 -0300
DN> X-Authentication-Warning: quantum.inexo.com.br: danton owned process doing -bs
DN> Date: Fri, 6 Aug 2004 14:32:12 -0300 (EST)
DN> From: Danton Nunes <danton at inexo.com.br>
DN> To: Grupo de Trabalho de Engenharia e Operacao de Redes <gter at eng.registro.br>
DN> Subject: Re: mesmo BIND com diferente respostas. WAS: [GTER] Dois Links
DN>         redundantes
DN> In-Reply-To: <4113BEA6.7050900 at trf3.gov.br>
DN> Message-ID:
DN> <Pine.LNX.4.10.10408061428360.468-100000 at quantum.inexo.com.br>
DN> MIME-Version: 1.0
DN> Content-Type: TEXT/PLAIN; charset=iso-8859-1
DN> Content-Transfer-Encoding: 8BIT
DN> X-BeenThere: gter at eng.registro.br
DN> X-Mailman-Version: 2.1.5
DN> Precedence: list
DN> Reply-To: Grupo de Trabalho de Engenharia e Operacao de Redes <gter at eng.registro.br>
DN> List-Id: Grupo de Trabalho de Engenharia e Operacao de Redes
DN>         <gter.eng.registro.br>
DN> List-Unsubscribe: <https://eng.registro.br/mailman/listinfo/gter>,
DN>         <mailto:gter-request at eng.registro.br?subject=unsubscribe>
DN> List-Archive: <http://eng.registro.br/pipermail/gter>
DN> List-Post: <mailto:gter at eng.registro.br>
DN> List-Help: <mailto:gter-request at eng.registro.br?subject=help>
DN> List-Subscribe: <https://eng.registro.br/mailman/listinfo/gter>,
DN>         <mailto:gter-request at eng.registro.br?subject=subscribe>
DN> Sender: gter-bounces at eng.registro.br
DN> Errors-To: gter-bounces at eng.registro.br

DN> On Fri, 6 Aug 2004, Marlon Borba wrote:

>> só tenham cuidado com a versão.
>> extraído do livro "the concise guide to dns and bind", de nicolai langfeldt:
>> 
>> "BIND 8 requires different instances of BIND serving the different zone
>> data. BIND 9 (and, in fact, 8.2) enables implementation of split DNS
>> more easily with the view option."
>> 
>> minha preocupação com isso é a segurança. será que um servidor BIND
>> comprometido, usando essa configuração, não poria tudo a perder?

DN> alguém ainda usa bind-8?

DN> quanto à segurança acho que vale a pena o risco. mas nada te impede de rodar
DN> duas instâncias do daemon com configurações diferentes no bind-9, se você for
DN> paranóico.

Não vale o trabalho! Imagina o trabalho de configurar a mesma ZONA varias
vezes...