Customer Reviews

DNS and BIND

5 star:		(50)
4 star:		(13)
3 star:		(3)
2 star:		(0)
1 star:		(0)

 

 

I'm the DNS administrator at a mid-size Internet Service Provider, and because we are an ISP, a lot of our day-to-day operations rely on the proper implementation of DNS. After all, as I found out today, we do primary DNS for approximately 1800 domains (yikes). The combination of everyday experience with DNS and the wealth of information - both theoretical and practical - that I got from this book has done so much for my understanding of DNS and of the Internet as a whole. The book begins with the basics of building a nameserver, but I know that if I have a specific question, I can use it as a reference book as well. It's also written in a straightforward, accessible manner. The only constructive criticism I can offer is that I wish it had more information about managing many domains (not just subdomains). That's still not enough to lower my overall rating to four starts from five. If you have to get one book on DNS, get this one - it will more than suffice. I look forward to the next edition covering BIND 8.x. Excellent job, O'Reilly, Paul Albitz, and Cricket Liu!

Changing from a pre-8 version of BIND to version 8 of BIND is not as straightforward as previous upgrades have been. Then `named.boot' file is entirely different, among other changes. This book is great at identifying the required changes and assisting in making those changes.

DNS and BIND clarifies all the mysteries associated with BIND (named) and DNS. Easy to read. Covers every detail from getting and installing the latest BIND, to configuration and troubleshooting. Has a great chapter on nslookup and another that gives detailed explanations of just about every BIND related error message. The only thing they left out is info on configuring syslog to manipulate in a usable manner the BIND generated messages.

For some reason, DNS seems to be a mystery to so many sysadmins. If it were as simple as people often pretend it is (typical system admin person: "Oh, I already know everything about DNS that I need to know... so why read a book or take a course?"), then why do I see 15,000+ lame server messages and 250+ mail CNAME messages every month? These errors are only the result of DNS configuration errors!

Very few sysadmin people REALLY know as much about BIND and DNS as they should. If you are a sysadmin person, do yourself a favor and buy and read this book. If you are an IT manager, check your system administrator's book shelf. If this book is missing, then buy it for them and make them read it! (You should read it first, then develop some test questions to see if they really did read it!)

This BOOK MUST BE REQUIRED READING for EVERY system administrator on any type of system connected to the Internet. If everyone that administered an Internet site read this book, we could probably reduce the error traffic on the Internet by 50% or more!

This book also should be the basis of a required one-quarter undergraduate CS course at all schools that teach CS, CE, IT, or equivalent.

One of the best written of the O'Reilly books.

Jon R. Kibler, Systems Architect, Advanced Systems Engineering Technology, Inc.

I really needed to understand DNS/BIND; not just know how to start, run, and update it- but really understand DNS. This book was perfect. The authors introduced DNS with a high-level overview and then moved in closer to help you set it up. You can actually read the fist 3 chapters and work through the next 2 while setting up your server and domain. The rest of the book really gets into the nuts and bolts of DNS and BIND. Don't stop after chapter 5, continue reading and pick all the knowledge you will need to be a DNS/BIND admin.

It doesn't matter if you're new to Linux/UNIX or if you've been using it for awhile, this book delves into the mysteries behind DNS and BIND and puts the right information in simple, easy to understand format at your fingertips! So easy to follow, I had my basic DNS up and running in a few hours and tweaked to maximum efficiency in a few days! If you're planning on setting up and running a DNS server or if you just need to run it for your internal network this book explains it all! Buy it now... you won't regret it! Kudos to Paul for such a wonderful peice of work!

First off, the most recent edition of this book was published in May 2006, so all reviews prior to that are discussing previous editions of this book.

The domain name system or domain name server (DNS) is a system that stores and associates many types of information with domain names, but, most important, it translates the domain name (computer hostnames) to IP addresses. It also lists mail exchange servers accepting e-mail for each domain. In providing a worldwide keyword-based redirection service, DNS is an essential component of contemporary Internet use. DNS is most well-known for making it possible to attach easy-to-remember domain names to hard-to-remember IP addresses. BIND (Berkeley Internet Name Domain) is the most commonly used DNS server on the Internet, especially on Unix-like systems, where it is a de facto standard. A new version of BIND (BIND 9) was written from scratch in part to address the architectural difficulties with auditing the earlier BIND code bases, and also to support DNSSEC (DNS Security Extensions). Other important features of BIND 9 include: TSIG, DNS notify, nsupdate, IPv6, rndc flush, views, multiprocessor support, and an improved portability architecture. This book was written to address these changes.

DNS is being used for many more applications than in the past. With ENUM (electronic numbering), DNS is used by voice-over-IP gear. With SPF (the Sender Policy Framework), mailers look up information in DNS to check for mail spoofing. This makes DNS more critical than ever, and a target for hackers. To handle these additional applications and increased threats, DNS has had to be extended, adding cryptographic security, for example.

These topics and others are covered in the new edition of DNS and BIND. Security is therefore one of the topics that is deeply covered in this book. The previous editions of this book also described how to secure name servers, but most readers probably felt the likelihood of their name servers coming under attack was remote where today it is probably going to happen. There's been a recent spate of DNS amplification attacks reported in the news, therefore it is necessary for system administrators of Internet name servers to guard against these attacks by limiting access top recursion, which is covered in the chapter entitled "Security".

The new and fifth edition of this old standard covers BIND 9.3.2, the most recent release of the BIND 9 series, as well as BIND 8.4.7. Beginning with an introduction to DNS and what it does, the book guides administrators through all aspects of setting up, configuring, and working with the distributed host information database. Other topics include using MX records to route mail, subdividing domains, the DNS Security Extensions (DNSSEC) and Transaction Signatures (TSIG), dynamic updates, troubleshooting, and DNS programming using the resolver library and Perl's Net::DNS module. All of the programming examples in the book can be downloaded from the website of the latest edition of the book. Anyone who works with DNS regularly or wants to be more informed about the Internet and how it works will find this book useful. There are other books on this subject that are easier to read, but none that are as complete as this one. I highly recommend it. The following is the table of contents:

Chapter 1. BACKGROUND
A Brief History of the Internet; On the Internet and Internets;
The Domain Name System, in a Nutshell; The History of BIND; Must I Use DNS?;

Chapter 2. HOW DOES DNS WORK?
The Domain Namespace; The Internet Domain Namespace; Delegation; Nameservers and Zones; Resolvers; Resolution; Caching;

Chapter 3. WHERE DO I START?
Getting BIND; Choosing a Domain Name;

Chapter 4. SETTING UP BIND
Our Zone; Setting Up Zone Data; Setting Up a BIND Configuration File; Abbreviations; Hostname Checking; Tools; Running a Primary Nameserver; Running a Slave Nameserver; Adding More Zones; What's Next? ;

Chapter 5. DNS AND ELECTRONIC MAIL
MX Records; Movie.edu's Mail Server; What's a Mail Exchanger, Again? ; The MX Algorithm; DNS and Email Authentication;

Chapter 6. CONFIGURING HOSTS
The Resolver; Resolver Configuration; Sample Resolver Configurations; Minimizing Pain and Suffering; Additional Configuration Files; The Windows XP Resolver;

Chapter 7. MAINTAINING BIND
Controlling the Nameserver; Updating Zone Datafiles; Organizing Your Files; Changing System File Locations; Logging; Keeping Everything Running Smoothly;

Chapter 8. GROWING YOUR DOMAIN
How Many Nameservers? ; Adding More Nameservers; Registering Nameservers; Changing TTLs; Planning for Disasters; Coping with Disaster;

Chapter 9. PARENTING
When to Become a Parent; How Many Children? ; What to Name Your Children; How to Become a Parent: Creating Subdomains; Subdomains of Domains; Good Parenting; Managing the Transition to Subdomains; The Life of a Parent;

Chapter 10. ADVANCED FEATURES
Address Match Lists and ACLs; DNS Dynamic Update; DNS NOTIFY (Zone Change Notification); Incremental Zone Transfer (IXFR); Forwarding; Views; Round-Robin Load Distribution Nameserver; Address Sorting; Preferring Nameservers on Certain Networks; A Nonrecursive Nameserver; Avoiding a Bogus Nameserver; System Tuning; Compatibility; The ABCs of IPv6 Addressing; Addresses and Ports;

Chapter 11. SECURITY
TSIG; Securing Your Nameserver; DNS and Internet Firewalls; The DNS Security Extensions ;

Chapter 12. NSLOOKUP AND DIG
Is nslookup a Good Tool? ;Interactive Versus Noninteractive; Option Settings; Avoiding the Search List; Common Tasks; Less Common Tasks; Troubleshooting nslookup Problems; Best of the Net; Using dig;

Chapter 13. READING BIND DEBUGGING OUTPUT
Debugging Levels; Turning On Debugging; Reading Debugging Output; The Resolver Search Algorithm and Negative Caching (BIND 8); The Resolver Search Algorithm and Negative; Caching (BIND 9); Tools;

Chapter 14. TROUBLESHOOTING DNS AND BIND
Is NIS Really Your Problem? ; Troubleshooting Tools and Techniques; Potential Problem List; Transition Problems; Interoperability and Version Problems; TSIG Errors; Problem Symptoms;

Chapter 15. PROGRAMMING WITH THE RESOLVER AND NAMESERVER LIBRARY ROUTINES
Shell Script Programming with nslookup; C Programming with the Resolver Library Routines; Perl Programming with Net::DNS;

Chapter 16. ARCHITECTURE
External, Authoritative DNS Infrastructure; Forwarder Infrastructure; Internal DNS Infrastructure; Operations; Keeping Up with DNS and BIND;

Chapter 17. MISCELLANEOUS
Using CNAME Records; Wildcards; A Limitation of MX Records; Dial-up Connections; Network Names and Numbers; Additional Resource Records; ENUM; Internationalized Domain Names; DNS and WINS; DNS, Windows, and Active Directory;

APPENDIX A- DNS MESSAGE FORMAT AND RESOURCE RECORDS
Master File Format; DNS Messages; Resource Record Data;
APPENDIX B- BIND COMPATIBILITY MATRIX
APPENDIX C- COMPILING AND INSTALLING BIND ON LINUX
Instructions for BIND 8; Instructions for BIND 9
APPENDIX D- TOP LEVEL DOMAINS
APPENDIX E- BIND NAMESERVER AND RESOLVER CONFIGURATION
BIND Nameserver Boot File Directives and Configuration File Statements; BIND 8 Configuration File Statements; BIND 9 Configuration File Statements; BIND Resolver Statements
Section; BIND 9 Options Statement

DNS is a tough topic to explain; especially to those of us that have always worked in the Microsoft/WINS world. This book does a great job of that. The book is accurate and well organized and it holds a reserved spot on my shelf of regular reference guides. I recommend a little bit of basic knowledge of DNS when starting this book and then re-read the first chapter or two, but it does a great job of explaining DNS so that even Microsoft-centric people like me can understand.

I honestly knew zip about DNS, and in my field, that was just fine, I didn't need to know, and there were people who took care of that sort of thing.

However, one of our recent projects 'required' me setup a Name Server. The admin who was 'supposed' to do it... couldn't!

Anyway, this book really explains in excellent terms not only DNS servers, but the incredible chain of how it all works. By chapter 4, I had Bind installed, two Name Servers up, and 15 virtual hosts configured on a linux box.

I cannot say enough good things about O'Reilly, they cover their bases really well.

Regardless of whether you're new to DNS, or you know it all, this book will expand your knowledge base. Many kudos to the writers on a job well done.

DNS and BIND, Fourth Edition makes mastering this critical service easy. As someone who is trying to increase my knowledge of server-side services and the Linux operating system, I found DNS and BIND to be extremely helpful.

The authors seem to have found the ideal mix of humor, information and tips and taken that and rolled it into a very organized title. The book's chapters proceed in a logical order, a newbie can read the title cover to cover, while a more experienced admin can start in the middle somewhere and proceed to the back cover.

This reviewer was very impressed with the level of organization in this title. I have read alot of computer books, but it would appear that the authors really put the extra effort into this one.

This is one of the classical O'Reilly books with which O'Reilly got it's status of "you need to have this book". With this book it was easy to set up a domain name server on linux in no time. It goes very deep into details of DNS and BIND, so that one can probably handle DNS whithout other books. The chapters of the book are: 1.) Background, 2.) How Does DNS Work?, 3.) Where Do I Start?, 4.) Setting Up BIND, 5.) DNS and Electronic Mail, 6.) Configuring Hosts, 7.) Maintaining BIND, 8.) Growing Your Domain, 9.) Parenting, 10.) Advanced Features and Security, 11.) nslookup, 12.) Reading BIND Debugging Output, 13.) Troubleshooting DNS and BIND, 14.) Programming with the Resolver and Name Server Library Routines, 15.) Miscellaneous and F Appendices.

This book is a must have for anyone who administers DNS servers. I knew nothing about DNS or BIND before I bought this book. This book has made mystery behind DNS very clear.

As a person who runs a small ISP, this book has helped me a great deal in setting up and modifying our name servers. I highly recommend this book to anyone, the beginner or the advanced. Even know this book has taught me most of what I need to know, it is an excellent reference to go back on.

great book!