Setup a (safe) central DNS server with BIND9 forwarders
I’m trying to setup a new external DNS/Nameserver that queries multiple DirectAdmin servers. I’ve used BIND9 with forwarders to set this up and it works fine (with recursion enabled). The forwarders are only IP’s of servers where i host my websites on (no Google DNS or something). And when i check http://openresolver.com/?ip=dns1.chaseweb.nl it says that it isn’t vulnerable to DNS Amplification attacks.
I would like to know if this setup is safe enough to use in production or is it still vulnerable to DNS Amplification attacks or other attacks?
Looking forward hearing from the specialists over here!
(it’s now on a local box but i will move it to DO when it’s safe/ready)
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.