Talk:BIND
From Wikipedia, the free encyclopedia
Why is djbdns singled out as an example of an alternative system? --Karlkatzke 06:16, 30 Mar 2005 (UTC)
- Not any more, it would seem. But, yes, this article still has bits and pieces of what looks to be an ad for djbdbs. I've tried to minimize that (such as making it clear BIND 9 is a good deal more secure than BIND 4/8). Considering that BIND is the standard DNS server, the article for it should be at least as long as the article for MaraDNS, my humble little DNS offering. Samboy 08:20, 9 October 2005 (UTC)
"it was originally created by Paul Vixie in 1988." Not it wasn't. Check the history page. 1988 is just when Vixie took over maintainership.
Contents |
[edit] What does Microsoft use
I heard a perception that microsoft also use bind, okay not really bind but bind in a customized/extended form? Is this true or is their DNS a complete different implementation?
- Microsoft uses its own custom implimentation of DNS as of Windows NT4 (I think) and Windows 2000 for certain. Microsoft's DNS implimentation, as of Windows 2000 is designed to be intigrated into Active Directory. This is called, creativly enough, "Active Directory Intigrated DNS". An Administrator, at his option, may use BIND in lieu of Microsoft's own DNS. This arrangment brakes Active Directory intigration, however. I hope this clears things up.
- Microsoft has its own implementation of DNS called, creatively enough, Microsoft DNS. This is complete and separate from BIND, and is highly recommended when it is to be used with Active Directory (because of AD's heavy usage of DNS, it will add custom records). This is of Windows Server 2003.
- —RShi
[edit] Criticisms
Rewrote that sentence to more accurately reflect the information given by the referenced site, removed unfounded conclusion that BIND9 "has not experienced a significantly better security history". Alex G. (talk) 01:38, 5 June 2008 (UTC)
I took a look at the ISC vulnerability matrix for BIND (BIND 9, although a complete rewrite, has not experienced a significantly better security history.) and I'd like to note that the ISC page itself does not draw the conclusion that BIND 9 security is not much better than previous versions.
In fact, both 'critical' vulnerabilities were for BIND 8, and many of the BIND 9 vulns are fairly specific as to the configuration of the server and context of the attack. Alex G. (talk) 05:10, 4 June 2008 (UTC)
Modified LDAP section and changed it to a more general commentary on zone storage mechanisms. This isn't an advertisement for a commercial product supporting LDAP storage. Fehrgo (talk) 11:25, 15 January 2008 (UTC)
Removed this sentence:
BIND 9 is a fairly large application that includes a large number of features that most DNS administrators probably will never use.
Clearly not a sentence worthy of being in an encyclopedia of any sort. "fairly large", "large number", "most [admins] probably will never use". Wow! Vague. Vague. Vague AND speculatory. Amazing!
[edit] Merge rndc into BIND
I'd like to suggest rndc be merged into this page. It looks to me like rndc is part of bind, for example it is included as part of the bind9 debian package. All comments welcome. --h2g2bob 12:10, 17 March 2007 (UTC)