Knowledge

djbdns

Source 📝

339: 167:
As of 2004, djbdns's tinydns component was the second most popular DNS server in terms of the number of domains for which it was the authoritative server, and third most popular in terms of the number of DNS hosts running it.
735: 238:
pickdns — a database-driven server that chooses from matching records depending on the requestor's location. (This feature is now a standard part of tinydns.)
662: 680: 461: 740: 562: 344: 706: 295:
resolving are implemented as separate programs. The result of these design decisions is a reduction in code size and complexity of the
352: 406: 287:
In djbdns, different features and services are split off into separate programs. For example, zone transfers, zone file parsing,
299:
program that provides the core function of answering lookup requests. Bernstein asserts that this is true to the spirit of the
670: 319:. However this did not permit the distribution of modified versions of djbdns, which was one of the core principles of 278:
dnstrace (and dnstracesort) — comprehensive testing of the chains of authority over DNS servers and their names.
187: 56: 385: 688: 153: 612: 537: 486: 362: 512: 436: 175:
vulnerability reported in July 2008, but it has been discovered that it is vulnerable to a related attack.
730: 587: 316: 457: 209:, there are third party patches to add DNSSEC support to djbdns' authoritative-only tinydns component. 650: 320: 172: 149: 94: 27: 558: 324: 296: 145: 99: 703: 199: 160:
DNS software. As a challenge, Bernstein offered a $ 1000 prize for the first person to find a
107: 82: 710: 217:
The djbdns software consists of servers, clients, and miscellaneous configuration tools.
195: 410: 232:
walldns — a "reverse DNS wall", providing IP address-to-domain name lookup only.
724: 312: 183: 161: 112: 182:
has not been centrally managed since its release in 2001, and was released into the
675:— Jonathan de Boyne Pollard's debunking of several myths relating to djbdns 700:— Jonathan de Boyne Pollard's list of the several known problems in djbdns 179: 334: 22: 715: 292: 288: 269:
dnsfilter — looks up names for addresses read from stdin, in parallel.
87: 381: 275:
dnsq — non-recursive general record lookup, useful for debugging.
608: 533: 357: 206: 191: 482: 432: 640: 508: 303:
operating system, and makes security verification much simpler.
300: 157: 635: 164:
in djbdns, which was awarded in March 2009 to Matthew Dempsky.
123: 655: 235:
rbldns — a server designed for DNS blacklisting service.
645: 583: 257:
dnsipq — address from name lookup with rewriting rules.
458:"Multiple DNS implementations vulnerable to cache poisoning" 315:. Previously the package was distributed free of charge as 311:
On December 28, 2007, Bernstein released djbdns into the
704:
Supporting newer record formats through generic records.
559:"Detailed overview of DNS server software by Rick Moen" 263:
dnstxt — simple text record from name lookup.
171:djbdns has never been vulnerable to the widespread 118: 106: 93: 81: 55: 33: 21: 327:which required all components to be open-source. 186:in 2007. As of March 2009, there are a number of 681:"The known problems with Dan Bernstein's djbdns" 260:dnsname — simple name from address lookup. 609:"Frequently asked questions from distributors" 272:dnsqr — recursive general record lookup. 254:dnsip — simple address from name lookup. 152:in response to his frustrations with repeated 323:. Consequently, it was not included in those 229:tinydns — a database-driven DNS server. 8: 663:"Some of what is said about djbdns is wrong" 226:dnscache — the DNS resolver and cache. 16: 15: 251:axfr-get — a zone-transfer client. 736:Public-domain software with source code 716:LWN (Linux weekly news) looks at djbdns 534:"djbdns is placed in the public domain" 373: 241:axfrdns — a zone transfer server. 205:While djbdns does not directly support 656:A djbdns guide and tutorial with addon 7: 345:Free and open-source software portal 266:dnsmx — mail exchanger lookup. 148:implementation. It was created by 14: 353:Comparison of DNS server software 337: 202:to modify the released version. 62:1.05 / February 11, 2001 615:from the original on 2012-05-25 590:from the original on 2016-01-26 565:from the original on 2009-07-27 540:from the original on 2012-05-25 515:from the original on 2009-02-21 509:"Rapid DNS Poisoning in djbdns" 489:from the original on 2008-08-04 464:from the original on 2008-07-25 439:from the original on 2005-01-06 388:from the original on 2012-07-06 382:"The djbdns security guarantee" 483:"An Astonishing Collaboration" 1: 741:DNS server software for Linux 679:Jonathan de Boyne Pollard. 661:Jonathan de Boyne Pollard. 651:The djbdns section of FAQTS 757: 407:"The djbdns prize claimed" 198:), and more than a dozen 77: 51: 685:Frequently Given Answers 667:Frequently Given Answers 636:djbdns official homepage 363:DNS management software 144:software package is a 64:; 23 years ago 39:; 24 years ago 317:license-free software 584:"DNSSEC for TinyDNS" 321:open-source software 507:Day, Kevin (2009). 433:"DNS server survey" 431:Moore, Don (2004). 325:Linux distributions 156:in the widely used 150:Daniel J. Bernstein 37:March 25, 2000 28:Daniel J. Bernstein 18: 709:2005-06-07 at the 190:, one of which is 646:A guide to djbdns 138: 137: 748: 699: 697: 696: 687:. Archived from 674: 669:. Archived from 624: 623: 621: 620: 605: 599: 598: 596: 595: 580: 574: 573: 571: 570: 555: 549: 548: 546: 545: 530: 524: 523: 521: 520: 504: 498: 497: 495: 494: 479: 473: 472: 470: 469: 454: 448: 447: 445: 444: 428: 422: 421: 419: 418: 409:. Archived from 403: 397: 396: 394: 393: 378: 347: 342: 341: 340: 307:Copyright status 134: 131: 129: 127: 125: 83:Operating system 72: 70: 65: 47: 45: 40: 19: 756: 755: 751: 750: 749: 747: 746: 745: 721: 720: 711:Wayback Machine 694: 692: 678: 660: 632: 627: 618: 616: 607: 606: 602: 593: 591: 582: 581: 577: 568: 566: 557: 556: 552: 543: 541: 532: 531: 527: 518: 516: 506: 505: 501: 492: 490: 485:. 9 July 2008. 481: 480: 476: 467: 465: 456: 455: 451: 442: 440: 430: 429: 425: 416: 414: 405: 404: 400: 391: 389: 380: 379: 375: 371: 343: 338: 336: 333: 309: 285: 248: 223: 215: 173:cache poisoning 122: 73: 68: 66: 63: 43: 41: 38: 34:Initial release 12: 11: 5: 754: 752: 744: 743: 738: 733: 723: 722: 719: 718: 713: 701: 676: 673:on 2011-02-13. 658: 653: 648: 643: 638: 631: 630:External links 628: 626: 625: 600: 575: 550: 525: 499: 474: 449: 423: 398: 372: 370: 367: 366: 365: 360: 355: 349: 348: 332: 329: 308: 305: 284: 281: 280: 279: 276: 273: 270: 267: 264: 261: 258: 255: 252: 247: 244: 243: 242: 239: 236: 233: 230: 227: 222: 219: 214: 211: 196:Debian Project 154:security holes 136: 135: 120: 116: 115: 110: 104: 103: 97: 91: 90: 85: 79: 78: 75: 74: 61: 59: 57:Stable release 53: 52: 49: 48: 35: 31: 30: 25: 13: 10: 9: 6: 4: 3: 2: 753: 742: 739: 737: 734: 732: 729: 728: 726: 717: 714: 712: 708: 705: 702: 691:on 2010-04-25 690: 686: 682: 677: 672: 668: 664: 659: 657: 654: 652: 649: 647: 644: 642: 639: 637: 634: 633: 629: 614: 610: 604: 601: 589: 585: 579: 576: 564: 560: 554: 551: 539: 535: 529: 526: 514: 510: 503: 500: 488: 484: 478: 475: 463: 459: 453: 450: 438: 434: 427: 424: 413:on 2009-03-05 412: 408: 402: 399: 387: 383: 377: 374: 368: 364: 361: 359: 356: 354: 351: 350: 346: 335: 330: 328: 326: 322: 318: 314: 313:public domain 306: 304: 302: 298: 294: 290: 282: 277: 274: 271: 268: 265: 262: 259: 256: 253: 250: 249: 245: 240: 237: 234: 231: 228: 225: 224: 220: 218: 212: 210: 208: 203: 201: 197: 194:(part of the 193: 189: 185: 184:public domain 181: 176: 174: 169: 165: 163: 162:security hole 159: 155: 151: 147: 143: 133: 121: 117: 114: 113:Public domain 111: 109: 105: 101: 98: 96: 92: 89: 86: 84: 80: 76: 60: 58: 54: 50: 36: 32: 29: 26: 24: 20: 731:DNS software 693:. Retrieved 689:the original 684: 671:the original 666: 617:. Retrieved 603: 592:. Retrieved 578: 567:. Retrieved 553: 542:. Retrieved 528: 517:. Retrieved 502: 491:. Retrieved 477: 466:. Retrieved 452: 441:. Retrieved 426: 415:. Retrieved 411:the original 401: 390:. Retrieved 376: 310: 286: 246:Client tools 216: 204: 177: 170: 166: 141: 139: 23:Developer(s) 180:source code 725:Categories 695:2009-09-20 619:2007-12-31 594:2016-01-19 569:2009-07-13 544:2008-01-01 519:2009-02-23 493:2008-08-05 468:2008-08-05 443:2005-01-06 417:2009-03-04 392:2008-09-02 369:References 213:Components 69:2001-02-11 44:2000-03-25 293:recursive 88:Unix-like 707:Archived 641:N-DJBDNS 613:Archived 588:Archived 563:Archived 538:Archived 513:Archived 487:Archived 462:Archived 437:Archived 386:Archived 331:See also 289:caching 221:Servers 200:patches 130:/djbdns 119:Website 108:License 67: ( 42: ( 358:dbndns 297:daemon 291:, and 283:Design 207:DNSSEC 192:dbndns 142:djbdns 102:server 17:djbdns 188:forks 132:.html 301:Unix 178:The 158:BIND 140:The 95:Type 146:DNS 128:.to 126:.yp 100:DNS 727:: 683:. 665:. 611:. 586:. 561:. 536:. 511:. 460:. 435:. 384:. 124:cr 698:. 622:. 597:. 572:. 547:. 522:. 496:. 471:. 446:. 420:. 395:. 71:) 46:)

Index

Developer(s)
Daniel J. Bernstein
Stable release
Operating system
Unix-like
Type
DNS
License
Public domain
cr.yp.to/djbdns.html
DNS
Daniel J. Bernstein
security holes
BIND
security hole
cache poisoning
source code
public domain
forks
dbndns
Debian Project
patches
DNSSEC
caching
recursive
daemon
Unix
public domain
license-free software
open-source software

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.