Djbdns

djbdns is Daniel J. Bernstein (DJB)'s suite of DNS tools. It includes both a caching nameserver (dnscache) and an authoritative one (tinydns) amongst other things.

tinydns
Tinydns is an authoritative nameserver. If you run DNS servers for your own domains, tinydns can do that.

dnscache
Dnscache is a caching-only nameserver. It can perform lookups recursively, or by forwarding them to a (list of) upstream nameservers.

Why is the caching daemon separate from the authoritative one, unlike BIND? The importance of separating DNS caches from DNS servers.

axfrdns
Axfrdns serves zone transfers. These days, zone transfers are rarely used legitimately, so the daemon runs separately (from, say, tinydns) for security purposes.

There is an associated client, axfr-get.

The rest
These two are rarely used. See the official docs for more information.


 * walldns, How to set up a reverse DNS wall
 * rbldns, use rbldnsd instead

Daemontools
The djbdns daemons all use a service monitor called daemontools to start and monitor themselves. They sidestep the Gentoo RC (/etc/init.d) system entirely.

The program that starts/monitors each daemon is called svscan, and the daemontools ebuild will create an init script for it. So usually, you'll want to,

At this point, svscan will run on boot, but do nothing. To have it start any daemons, you need to create symlinks to those daemons' directories in the /service directory. For example,

After this, daemontools will handle the rest.

Installation
All parts of djbdns can be installed with,

After the installation, you'll need to run a configuration command according to the documentation:axfrdns-conf, dnscache, tinydns.

Gentoo creates users for these three daemons automatically, so if you just want to get started, you can run one or more of the following commands, depending on which daemons you're going to use:

You'll need to replace $ip in the commands above with the ip address on which the server will run.

You will also need to inform daemontools of the new services. If you used the commands above,

Patches
Djbdns is no longer being developed upstream. All changes now come in the form of patches, most of which will not be incorporated into the ebuild. Below is a list of patches that work on Gentoo. The djbdns ebuild support user patches, so to apply these, simply add them to /etc/portage/patches/net-dns/djbdns.


 * CVE-2012-1191 Fix (by Peter Conrad). References: CVE-2012-1191, Gentoo bug #404959.