[SUMMARY] DNS server NIS member ! good practice ???

From: Moti Levy (mlevy@lannet.com)
Date: Sun Sep 10 2000 - 06:27:56 CDT


Hi Guru's ,
Before I summarize I'd like to apologize to Jay L. again if I offended him
in any way ( I got the [SUMMARY] right this time ... ).
As for my question here are my conclusions .
1. combining dns and NIS is like giving a hacker to entry points on the same
machine . both services are easy to hack and it is not recommended to put
them both on the same machine . -> this is true for internal dns and a HUGE
no no for external ones ( internal - inside the LAN ,external - behind the
firewall ).
2.those who said dns NIS is o.k. in most cases were running both the master
NIS and dns server on the same host mainly because of convenience .
My Decision
I will set up the dns as a stand alone machine .

Regards ,
Moti Levy
Unix Admin
mlevy@lannet.com
03-6457551
054-929319

On Tue, Sep 05, 2000 at 12:07:18PM +0200, Moti Levy wrote:
> Hi Guru's
> your opinion is needed .
> our dns servers run on Unix ( duh ... ) .
> they serve the whole company (pc's and outside world ).
> we ( sys admins ) have a debate if they should be nis clients as well .
> 1.is this good practice ?
> 2.would you make a dns server an nis server /slave ?

-

S
U BEFORE POSTING please READ the FAQ located at
N ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/faq
. and the list POLICY statement located at
M ftp://ftp.cs.toronto.edu/pub/jdd/sun-managers/policy
A To submit questions/summaries to this list send your email message to:
N sun-managers@sunmanagers.ececs.uc.edu
A To unsubscribe from this list please send an email message to:
G majordomo@sunmanagers.ececs.uc.edu
E and in the BODY type:
R unsubscribe sun-managers
S Or
. unsubscribe sun-managers original@subscription.address
L To view an archive of this list please visit:
I http://www.latech.edu/sunman.html
S
T



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:14:16 CDT