IMO here's a better tutorial by D. J. Bernstein: http://cr.yp.to/djbdns/intro-dns.html http://cr.yp.to/djbdns/intro-dns.html (although the "record" syntax is fo

IMO here's a better tutorial by D. J. Bernstein: http://cr.yp.to/djbdns/intro-dns.html http://cr.yp.to/djbdns/intro-dns.html (although the "record" syntax is for his own tinydns server vs. BIND's zone files). But if you care about security, you probably don't want to be running BIND given its long history of bugs and security holes. Here's BIND's security advisory page: http://www.isc.org/advisories http://www.isc.org/advisories. By contrast only a single security hole has ever been discovered in the djbdns suite: http://article.gmane.org/gmane.network.djbdns/13864 http://article.gmane.org/gmane.network.djbdns/13864. DJB has a well earned reputation for being abrasive, but his proven track record for writing secure software is unmatched. Full disclosure: I'm developing a DNS hosting service (http://slickdns.com http://slickdns.com) and needless to say I do not use BIND.