[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: When bind9 reinstalls, no db.root



On Wed, Aug 21, 2002 at 10:19:49PM -0400, Scott K. Ellis wrote:
> > Still, breaking bind's access to root name servers is particularly
> > troublesome because it may tend to break all net access.  It may be
> > worthwhile to remove db.root from the list of configuration files.
> > Especially, because this list isn't something anyone should need to
> > change.
> 
> I beg to disagree.  Changing db.root is the primary way to use an alternate
> DNS root (either for an all-internal DNS, or to utilize an alternate DNS
> root than NetSol's).  Just because you can't see why something might be
> configured differently doesn't mean other people can't.

One can change the database reference in named.conf to do this.  The
difference is that db.root references 'the' root servers.  You can
choose which ones you want to use in the zone file:

  // prime the server with knowledge of the root servers
  zone "." {
          type hint;
          file "/etc/bind/db.alternative_root";
  };

The trouble with removing db.root is that it may not be obvious how to
recover when it is missing.



Reply to: