Smallest, most secure Linux DNS

[shaithis]

I have been designing a nice virtualised DMZ at home for playing about with and have started to like it a bit too much......and I now want to start using some of the features remotely that I have been playing with locally.....this means I will need an externally-facing DNS server.

Everything internally is Windows 2008 (I have very little knowledge of Linux) and I have virtually run out of system resources on my ESX box.....which means I need to shoe-horn the external DNS into the mix.


Therefore I am looking for a highly-secure, extremely small footprint DNS server......what would you suggest?

[aidanjt]

There's no pre-rolled distros which do that afaik. But a minimal ubuntu server install will use less than 1G of disk space, and 128-256MB of memory allocated to it should be enough with less than a 500 DNS records, if you're not comfortable with editing BIND zones, then install ebox with it, but make sure external users can't access that. It would be a good idea to use a hardened kernel as well.

[Jay]

I use CentOS with Bind

[oolon]

Its not linux, but this to me sounds like a job for OpenBSD so it is Unix. The DNS server will be the same as under linux, the ISC bind. OpenBSD is a distro built from the security point of view.