VPN network is a good idea, too, but I know low-budget providers don't like VPNs because they can be a pain to support. If anyone has staff/friends trying to use VPN software, you probably already kn

Sure... Various software have safe settings by default (e.g. dnsmasq reacts only to local queries), other will definitely need some tweaking (ACLs) and/or good firewalling.

(Quote)

Running your own DNS would take some load off of the bigger DNS's, but I think the greater part of the resolves will end up at one of the ISP's DNS, and they get paid to provide them so they should be

(Quote)

Best way to install i found is;

It's quite secure but as always its a good idea to set some iptable rules to drop any connection to your DNS that isn't you.

(Quote)

Running one's own DNS resolver/cache/forwarder/adblocker is definitely a good thing, provided 1/ it is not public (the "security" part) 2/ properly configured+monitored (the &quo

Are you sure your smartphone is actually using your DNS?

(Quote)

As Jpshua2216 said you could rate limit your dns request. You could also whitelist certain IP's, and maybe even setup a vpn so you can authenticate before using the dns? I don't know enough about dns

(Quote)

(Quote)

putting up a public DNS may open your server up to amplification attacks. You'd be irritating

Setting up DNS is easy enough, but I haven't tried getting a subscription feed integrated, which is really the key here.

Will be H.A. enviroment based on onAPP with default 10Gbps ddos mitigation ( https://www.domflow.it/ddosprotection.php ), external firewall configuration, ipv6 and internal network support. Onclick AP

In case you are interested: I have a couple of 1 core, 256MB KVM VPSs (usually with disk space as low as 10 GB) running DNS for a couple of zones and backup mx for low to mid traffic sites and a) runs

Hello,

As I'm planing to use this server for mail and DNS only,