5 ms·
Quick, name a non-niche dns server that is easy to configure and maintain that hasn't had a major vulnerability in the last six months.
by raggi 8y ago
Quick, name a non-niche dns server that is easy to configure and maintain that hasn't had a major vulnerability in the last six months.
- nvarsj 8y agoUnbound.
- sverige 8y agoMichael Lucas wrote up a nice piece about setting up an Unbound DNS Server on OpenBSD eight years ago.[0] It might need some updating, but probably you could do that by reading the man page.[1] [0] https://mwl.io/archives/580 https://mwl.io/archives/580 [1] https://man.openbsd.org/unbound.conf https://man.openbsd.org/unbound.conf
- tomjakubowski 8y agodnsmasq's last CVE was in October 2017 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dnsmasq https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=dnsmasq despite that "safety record", I am probably going to switch to https://github.com/bluejekyll/trust-dns https://github.com/bluejekyll/trust-dns
- bluejekyll 8y agoThanks for the shoutout to trust-dns. I would take the fact that there have been no CVEs on the server with a grain of salt, as I don’t think it’s seeing a lot of use. The embedded resolver is getting a lot... Feel free to open any issues for features you’d like to see.