Print Page | Close Window

Simple DNS

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6241
Printed Date: 13 March 2025 at 5:41pm


Topic: Simple DNS
Posted By: jerbo128
Subject: Simple DNS
Date Posted: 17 September 2007 at 7:01pm
We're having issues with SFE pounding Microsoft DNS so bad that we have to restart the DNS hourly.
 
We're looking at SimpleDNS - hoping it will be more robust and stand up to the spamfilter.
 
Anyone use Simple DNS Plus or have comments on what you do use?
 
thanks
jerbo128



Replies:
Posted By: WebGuyz
Date Posted: 18 September 2007 at 11:16am
We've been using SimpleDNS for years and its been great. We have 2 DNS servers and both average about 20-30 queries per second with spikes to 75 or more.
 
Another nice feature is if you have 2 of them and create a new record on the primary it will create the account on the secondary automatically as well as keep it in sync. So all you have to worry about is 1 DNS server and the slave will mirror the master.


-------------
http://www.webguyz.net


Posted By: Desperado
Date Posted: 18 September 2007 at 11:40am
jerbo128,
 
How many messages / minute do you have that MS DNS can not handle it?  I have what I feel is fairly high traffic and have zero issues with DNS.  I have 2 MS-DNS resolvers and 1 BSD and a backup.


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: jerbo128
Date Posted: 18 September 2007 at 5:51pm
Desperado -
We average 30-50 connections at a time to the SFE.  I am checking 5 MAPS and 2 SURBL Lists, plus reverse dns, mx, spf, etc.
 
When it fails, the service remains running, but I get a lot of timeout, or dns server reports query errors.  I had a batch file setup to restart the dns service every hour, and that helped alot.  But it was still something that I had to keep an eye on.
 
I liked the idea of SimpleDNS due to the fact that WebGuyz stated above:  you add a domain to the master and it sends it to all slaves.  That is a huge timesaver.
 
We did switch to the simpleDNS trial, and after 48 hours of running it, have not had to restart it at all.  It is showing 30-40 queries/sec with spikes to 70.


Posted By: Desperado
Date Posted: 18 September 2007 at 5:55pm
Jerbo128,
 
I guess our setup is not the same.  We do not have ANY zones on our resolvers.  They are used for our servers to do DNS lookups only (Caching Servers) so I am comparing Apples and Oranges!


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: WebGuyz
Date Posted: 18 September 2007 at 6:12pm
jerbo128,
  Are you using a forwarder like your ISP's DNS server? If so you might try removing it to make sure the issue is not related to that.
 
  We have about 455 domains we are authoritive for and have 2 SFE's that stay busy all the time being handled by 2 SimpleDNS servers and it something I never even think about because it just works.
 
 


-------------
http://www.webguyz.net


Posted By: jerbo128
Date Posted: 18 September 2007 at 7:59pm
Webguyz,
 We tried the forwarders once before, and found that it was much more efficient to just resolve the domains ourselves.   It created a lot of timeouts in the SF.
 
So far, I am thrilled with the Simple DNS.  The GUI alone is so much better.  Not to mention the performance.


Posted By: __M__
Date Posted: 19 September 2007 at 2:06am
I evaluated Simple DNS Plus some time ago and whilst it looks very good the thing that put me off using it is the 14 day trial period. Call me paranoid but if I'm going to run an application for DNS services I'm going to want to beat it to death for a bit more than 14 days before I commit to purchasing the product. So I never really got serious with it.




Posted By: Desperado
Date Posted: 19 September 2007 at 10:31am
WebGuys,
 
We ARE an ISP and do not use forwarders.  Our resolvers (caching DNS servers) look directly at the root servers.


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: WebGuyz
Date Posted: 19 September 2007 at 10:41am
Desperado,
 
  Was replying to jerbo128, I should have been more specific. 
 
Some smaller shops still use their ISP's DNS but with the load caused by RBL and SURBL lookups they might start getting resource limited by their ISP's.


-------------
http://www.webguyz.net


Posted By: dcook
Date Posted: 19 September 2007 at 5:12pm
We use Simple DNS and have for three years.  It works well with Spamfilter.  You can also run a separate instance or two of the Microsoft DNS in just for your spamfilters.
 
 


-------------
Dwight
www.vividmix.com


Posted By: IKILLSPAM1
Date Posted: 20 September 2007 at 9:54am
I've used Simple DNS for approx 5 years as well. We act as a small ISP serving all our clients hosting needs.  I run 3 NS servers, each on seperate internet connections, and one at a totally different location for redundancy.
 
You update NS1's records, click Tools, reload DNS records and then all 3 get sync'd. Never have had any issues with crashing and I mean never. Had issues with NAT where our main NS server was on the internal network and workstations would look to it for records of websites we host and get returned the external IP which of course doesnt work. Simple DNS added a feature not too long ago that allows you to map an external IP to an internal IP. Pretty cool. So most of our website reside on the same external ip and internal ip, so one simple nat map fixed that problem.
 
My NS1 Simple DNS reports uptime 183 days  12,972,858 Requests.  Judge for yourself if thats stable :)
 
 


Posted By: Desperado
Date Posted: 20 September 2007 at 10:09am
Originally posted by IKILLSPAM1 IKILLSPAM1 wrote:

Had issues with NAT where our main NS server was on the internal network and workstations would look to it for records of websites we host and get returned the external IP which of course doesnt work.
 
IKILLSPAM1,
 
In cases like this, which are common especially in co-locations where the IP's are private inside, your firewall should do "DNS ReWrite" which globally solves this issue.  In the case of Cisco PIX firewalls, you can do DNS ReWrite on a rule by rule basis.


-------------
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com



Posted By: __M__
Date Posted: 20 September 2007 at 9:15pm

Now with IKILLSPAM1's also adding his recommendation I might go and have another look at Simple DNS.




Print Page | Close Window