RE: DNS on IBM i

I would not open an inside server to the public. Now if this is for internal DNS only, I do not see why not. If you are running an active directory domain though, DHCP clients may not update the DNS server dynamically. I honestly do not know if they would update DNS correctly or not. I do know that for MS AD to work correctly, you do need to have the DNS setup correctly and it is done automatically on a domain controller. We use hosted DNS for our external services and our AD controllers internally.

--
Chris Bipes
Director of Information Services
CrossCheck, Inc.

707.665.2100, ext. 1102 - 707.793.5700 FAX
chris.bipes@xxxxxxxxxxxxxxx
www.cross-check.com
Notice of Confidentiality: This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information.  If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited.  If you have received this e-mail in error, please immediately notify me by e-mail (by replying to this message) or telephone (noted above) and permanently delete the original and any copy of any e-mail and any printout thereof.  Thank you for your cooperation with respect to this matter.


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxx> On Behalf Of Jim Oberholtzer
Sent: Monday, April 23, 2018 2:10 PM
To: 'Midrange Systems Technical Discussion' <midrange-l@xxxxxxxxxxxx>
Subject: DNS on IBM i

First, does anyone other the Larry and myself use the DNS server on IBM i?



So my AD server took a dump yesterday. Dead. RIP. RAID5 on the data disks
so I can get the data back, not worried about that. So I go to create the
DNS server on the V7R3 partition in my technology stack. Creates the
server, but does not create the forward zones, so call to IBM. First thing
out of the mouth of the technician that is assigned to help me is: "Don't
run DNS on IBM i ". What? Did I just hear that right? After some diagnosis
we found the problem, and I am happily putting in my host names. Then I add
the forwarder zone for the external DNS. Restart server. Works like a
champ, and is many times faster than the old AD server.



Now since IBM does a very good job of keeping the BIND9 updated for security
flaws, why not use it? I know some security firms have a cow when they see
BIND 9 but how bit of a problem is that?

--

Jim Oberholtzer

Agile Technology Architects