[dns-operations] Best Practices in DNS security

[sthaug at nethelp.no]

> Apropos, we dont have enough different DNS-servers. Bind is close to a
> monopoly. djbdns can do everything by fly or read the manual. I think
> it is good for experimenting and for develloping your own nameserver but
> it is not meant for production. Nevertheless there exist other
> nameservers or do you think ".com" is running on Bind?

Certainly there are other name server implementations than BIND, both
open source and commercial versions. We run our authoritative name
servers on BIND 9, and use Nominum CNS for our recursive name servers.
They both work well for us.

Steinar Haug, Nethelp consulting, sthaug at nethelp.no