I Got It to Work! How Do I Make Sure Everything Keeps Working?

Q: What does redundancy mean?
A: Have multiple DNS servers! Have them on multiple networks! Microsoft recently had a dramatic DNS failure because all of their DNS was on one class C subnet. If you only have one network, you can contact other people in similar situations and swap DNS service.

Q: How can I ensure DNS Stability?
A:
1. If at all possible, install hardware monitoring systems on all your systems so that if they stop operating they will be rebooted. For a Mac Server there is a great product line called Power key Pro Other solutions involve APC Master Switch or X10 modules combined with monitoring software.

2. Get a powerful server to handle the load. Use a stable operating system. Get a surge protector, or better yet a UPS. Don’t run a browser from your server host.

Check the service level agreement on your Internet connections. What is your ISP’s responsibility for keeping your connection up?


Q: How do I ensure DNS security?
A: MAKE SURE YOU ARE RUNNING THE MOST RECENT VERSION OF YOUR DNS SERVER. NOT DOING SO IS THE #1 CAUSE of INTERNET SECURITY PROBLEMS.

This cannot be repeated loudly or often enough. 80% of BIND users are not running the current version of BIND, and that’s is why hackers happen.

The most current version of a DNS Server is usually pretty secure.

Q: What is spoofing?
A: Without describing it to the point of instruction, spoofing is a hacking tactic where vulnerable DNS servers are poisoned with false DNS data which they cache. This false DNS data is used to reroute all outgoing Internet traffic, allowing the hacker to read all outgoing E-mail, redirect Internet transmissions, and otherwise monitor Internet usage.

You can solve any potential spoofing issues by making sure you are running the most current version of BIND or QuickDNS Server.

Q: What other security issues should I be aware of?
A:
1. Make sure that you use good passwords.
2. Make sure that you don’t leave QuickDNS Manager connected to your servers when you aren’t at your computer.
3. Make sure your network is physically secure. Your server cannot serve your zone from the back of somebody’s truck! Make sure that you keep backup copies of your zones off premises. In many cases the work involved in rebuilding DNS data from scratch after some misadventure can be a worse disaster then the actual hardware loss.