DDNS and IXFR?

Posted Jan 20, 2003 17:21 UTC (Mon) by edstoner (subscriber, #4496)
In reply to: DDNS and IXFR? by hensema
Parent article: A couple of alternative DNS servers

Oak supports Dynamic updates. It doesn't support incremental zone transfers yet, but should in a week or two.

Oak supports AAAA records but doesn't support A6 or DNAME because the IETF has downgraded them to experimental and recommended that people don't use them (that's my understanding anyway).

Oak runs as an unpriviliged user by default and it should be fairly easy to run it in a chroot jail. These things are good at protecting the system the server is running on, but don't help at all in protecting the data in the running DNS server. Not having the cache poisoned and not having someone rewrite the zone data so that all of your server's names point to their machines can be just as important as not letting them be root on the host machine. In other words, the code in the DNS Server still needs to secure, no matter how secure the system it's running on is.