The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

bind/DNS setup in WHM/cpanel is faulty!

Discussion in 'Bind / DNS / Nameserver Issues' started by cyberspirit, Jan 27, 2004.

  1. cyberspirit

    cyberspirit BANNED

    Joined:
    Jun 27, 2003
    Messages:
    293
    Likes Received:
    0
    Trophy Points:
    0
    The way WHM/cpanel sets up bind is that the default TTL time for records is 14400 seconds which is 4 hours. But the refresh time for secondary (and more) DNS servers is set to 8 hours! That of course does not work. It would mean that if you change a record in the primary DNS server that after 4 hours a client could get mixed answers depending on which DNS server is used for the query. And DNS servers are used not in an order like some believe!
    Of course some will say that there is a notify message sent after changes but these messages do fail.
    So one rule is to always set the refresh time to the same or lower value than the TTL time of the zone or the lowest record!
    So if Josh or Nick see this please make sure you change the defaults in the next update!!!
     
  2. amdmachine

    amdmachine Member

    Joined:
    Feb 20, 2003
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
  3. cyberspirit

    cyberspirit BANNED

    Joined:
    Jun 27, 2003
    Messages:
    293
    Likes Received:
    0
    Trophy Points:
    0
    amdmachine,
    The whole purpose of DNS is to be self-sufficient!
    If set up right DNS needs to no syncing scripts. Of course there are always ways to tweak things or correct behaviour.
    But if set up right DNS works very reliably and the way bind is set up with cpanel it does not.
    For example bind in cpanel allows recursive queries and is open to zonetransfer requests from just anyone!
    This would not pass any security check in a larger corporation and I have pointed this out over and over again but no change!
     
Loading...

Share This Page