From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Message-ID: <44B00948.9010009@yandex.ru> Date: Sat, 08 Jul 2006 22:36:40 +0300 From: Artem User-Agent: Mozilla Thunderbird 1.0.2 (X11/20060222) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ALT Linux sysadmin discuss References: <44AE6763.30607@iop.kiev.ua> In-Reply-To: <44AE6763.30607@iop.kiev.ua> Content-Type: text/plain; charset=KOI8-R Content-Transfer-Encoding: 8bit Subject: Re: [Sysadmins] stealth nameservers X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.7 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Jul 2006 19:45:27 -0000 Archived-At: List-Archive: Andrii Dobrovol`s`kii wrote: > Hi, > Попробовал я тут проверить свой днс внешними проверялками и > столкнулся с непонятным фактом. Иногда проверялка рапортует о > появлении неких Stealth nameservers в количестве более одного. > Сервера совершенно левые и нигде у меня не записанные. Как это может > получаться и как с этим бороться? > > >>From "BINDv9 Administrator Reference Manual" Internet Software Consortium, Redwood City, CA 94063 A stealth server is a server that answers authoritatively for a zone, but is not listed in that zone's NS records. Stealth servers can be used as a way to centralize distribution of a zone, without having to edit the zone on a remote nameserver. Where the master file for a zone resides on a stealth server in this way, it is often referred to as a "hidden primary" configuration. Stealth servers can also be a way to keep a local copy of a zone for rapid access to the zone's records, even if all "official" nameservers for the zone are inaccessible -- Rgds, Artem.