<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html><head><title>MaraDNS - a security-aware DNS server</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <link rel="stylesheet" title="Woodson (Default)" type="text/css" media="screen, projection" href="maradns-1.2-s.css"> <link rel="alternate stylesheet" title="Large Print" type="text/css" media="screen, projection" href="maradns-1.2-l.css"> <link rel="stylesheet" type="text/css" media="print" href="maradns-1.2-p.css"> <link rel="stylesheet" type="text/css" media="handheld" href="maradns-1.2-h.css"> <script type=text/javascript src=styleswitcher.js></script> </head> <body> <div align=center id=maradns-all> <table><tr><td> <div align=left> <table><tr> <td valign=top width=340> <font id=maradns-name size="+4"><i><b>MaraDNS</b></i></font> <br> <div id=maradns-t> A security-aware DNS server </div> </td> <td> </td> <td valign=top id=topright width=220> <div align=right><table><tr><td id=trabalengua> <i> Erre con erre cigarro<br> Erre con erre barril<br> Rápido ruedan los carros<br> En el ferrocarril<br></i> </td></tr></table></div> </td> </tr></table> <script type=text/javascript> </script> <div id=lefthand> <div id=maradns-l> <a href="index.html">Main</a> <a href="download.html">Download</a> <a href="notes.html">Documentation</a> <a href="/blog">Blog</a> <a href="changelog.html">Changelog</a> <a href="sponsors.html">Sponsors</a> <a href="products.html">Products</a> </div> <!-- maradns-l --> <script type="text/javascript"> <!-- if(isOKbrowser()) { document.write("<p class=nocss><font size=-1>The following links that change text size will do nothing on your browser because your browser does not support CSS. This page is otherwise usable in a non-CSS browser."); document.write("<\/font><\/p><div class=makelarge><div class=iebug>"); document.write("To make the font larger, <A href=\"#\" onclick=\"setActiveStyleSheet('Large Print');return false;\">click here<\/A><\/div><\/div><p class=makenormal>"); document.write("To see this without using a large font, <A href=\"#\" onclick=\"setActiveStyleSheet('Woodson (Default)');return false;\">click here<\/A><\/p>"); } --> </script> </div> <hr class=moyet> <table><tr><td class=content width=596> <div id=maradns-r> <div id=paypal> <form action="https://www.paypal.com/cgi-bin/webscr" method="post"> <input type="hidden" name="cmd" value="_s-xclick"> <input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but04.gif" border="0" name="submit" alt="PayPal Donate"> <input type="hidden" name="encrypted" value="-----BEGIN PKCS7-----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-----END PKCS7----- "> </form> </div> <!-- end header --> <H1>Other DNS software</H1> <P> This is a list of some other DNS software out there. Note that a more detailed comparison between MaraDNS and the more notable projects listed here is available in the <A href=advocacy.html>advocacy document</A>. </P> <H2>Freely downloadable DNS servers</H2> <B>Caching DNS servers</B> <UL> <LI><A href="http://www.isc.org/products/BIND/bind9.html">BIND 9</A> is a complete rewrite of BIND, and, as such, probably does not have the security issues that previous versions of BIND has. In fact, one of the BIND developers found a security problem in earlier versions of MaraDNS. Very full-featured, and is the reference standard for the newer DNS RFCs. </LI> <LI><A href="http://www.powerdns.com">PowerDNS</A> is an authoritative and recursive DNS server with support for, among other things, SQL. I would like to applaud the PowerDNS developers for making a <i>libre</i> release of this software. </LI> <LI><A href="http://unbound.net">Unbound</A> is a recursive-only DNS server. </LI> <LI><A href="http://www.thekelleys.org.uk/dnsmasq/doc.html">DnsMasq</A> is a non-recursive caching DNS server. </LI> <LI><A href="http://www.maradns.org/deadwood">My own Deadwood project</A> is another non-recursive caching DNS server. </LI> <LI><A href="http://cr.yp.to/djbdns.html">DjbDNS</A> DJ Bernstein's DNS package, which has both an authoritative DNS server and a caching nameserver. It is now public domain software, no longer under a restrictive license. I don't like DjbDNS myself: It's out of date and no one has bothered to make a currently maintained fork of it. </LI> <LI><A href="http://freshmeat.net/projects/pdnsd/">pdnsd</A> is a recursive caching DNS server. Paul Rombouts is (was?) the current maintainer of this program. </LI> <LI><A href="http://posadis.sourceforge.net">Posadis</A> is another DNS server project, similiar to MaraDNS. This server is now both a resolving and an authoritative DNS server. Hasn't been updated in a while. </LI> </UL> <B>Non-recursive DNS servers</B> <UL> <LI><A href="http://www.nlnetlabs.nl/nsd/">NSD</A> is an authoritative-only DNS server which is compatible with BIND zone files. </LI> <LI><A href="http://mydns.bboy.net/">MyDNS</A> is an authoritative-only DNS server which uses MySQL as a database back end. The most currently updated version appears to be <A href="http://www.mydns-ng.com/" >MyDNS-ng</A>, the "next generation" version of MyDNS. </LI> <LI><A href="/download/non-maradns/sdns.tar.bz2">SDNS</A> is a project written in the late 1990s by Sandia Labs. Like MaraDNS, this project was written with security in mind. Since this is a government project, the code is public domain. The program does not seem to be downloadable anywhere, so I am mirroring it here. I would like to thank Fred Cohen for informing me about this package. <LI>The Pliant language/package <A href="http://pliant.cx/pliant/protocol/dns/">comes with a DNS server</A>. This DNS server can not recursively process DNS queries given a list of root servers. </LI> <LI><A href="http://www.twistedmatrix.com/">Twisted</A> includes a non-recursive DNS server. </LI> <LI><A href="http://www.xbill.org/dnsjava/">DnsJAVA</A> is an authoritative-only DNS server written in Java. </LI> <LI>The Eddit project includes a <A href="http://eddie.sourceforge.net/lbdns.html">DNS server</A> </LI> <LI><A href="http://threading.2038bug.com/sheerdns/">SheerDNS</A> is a simple non-caching DNS server that stores all records as their own files. </UL> <B>Abandoned DNS server projects</B> <p> These are DNS server projects which have not released any files for a significant period of time, and are not fully functioning DNS servers (either because the program did not have basic DNS functionality when abandoned, the program was not documented before being abandoned, or because the program was abandoned so long ago that it is not fully functional on today's internet). <UL> <LI><A href="http://www.digitallumber.com/oak">Oak DNS</A> is a DNS server written completely in python. It is compatible (I think) with both BIND zone files and cache files. The file can be downloaded <A href="http://www.digitallumber.com/oak/code/oak-1.2.tar.gz">here</A>, <A href="http://www.maradns.org/download/non-maradns/oak-1.2.tar.gz">here</A>, or <A href="http://www.lpthe.jussieu.fr/~talon/oak-1.2.tar.gz">here</A>. The most recent alpha version can be downloaded <A href="http://www.digitallumber.com/oak/code/oak-1.4.tar.gz">here</A> or <A href="http://www.maradns.org/download/non-maradns/oak-1.4.tar.gz">here</A>. The most recent file in this alpha is from February of 2003; until this program has a more recent update, I am marking this abandoned. (Thanks, Michel Talon, for the update) </LI> <LI><A href="http://moodns.sourceforge.net">MooDNS</A> is another DNS server project. A CVS checkout on January 21, 2003 shows that no files have been updated since July 20, 2002, except for a single readme file updated on August 1, 2002. This project is abadoned. <p> I have made a <A href="moodns-20021011.tar.bz2">tarball available</A> for people who do not want to bother with a CVS checkout.</p> </LI> <LI><A href="http://sourceforge.net/projects/dents">Dents</A> is a DNS server that showed a lot of promise. Unfortunatly, no files have been released since 1999. </LI> <LI><A href="http://www.kyuzz.org/antirez/ens.html">Yaku-NS</A> is a DNS server geared towards embedded systems. According to the changelog, no one has made any changes to this software since Feburary, 2001. </LI> <LI><A href="http://customdns.sourceforge.net">CustomDNS</A> has not released any files since the summer of 2000. </LI> </UL> <B>Other</B> <UL> <LI><A href="http://www.nimh.org/code/">LdapDNS</A> is a small DNS server which converts DNS requests in to LDAP requests, without caching. </LI> <LI><A href="http://www.dnspython.org/">DnsPython</A> is a DNS toolkit for Python. </LI> <LI><A href="http://gnudip2.sourceforge.net/">GnuDIP</A> is designed for dynamically assigned IP addresses. <LI><A href="http://jdrowell.com/Linux/Projects/jdresolve">JD Resolve</A> is a tool written in Perl that uses DNS to resolve hostnames. </LI> <LI><A href="http://dproxy.sourceforge.net/">Dproxy</A> is a caching DNS proxy. </LI> <!-- <LI><A href="http://posadis.sourceforge.net/servers.php">A list that the Posadis developers have of DNS servers</A> --> <LI><A href="http://cr.yp.to/djbdns/other.html">Dan J. Bernstein also has a list of DNS servers</A> </LI> </UL> <h2>Proprietary DNS solutions</h2> <em>No, I don't really care to list every single DNS server that exists here. I find the idea of using proprietary software for anything that matters repulsive; however I try to keep this list up-to-date</em> <UL> <LI><A href="http://www.ultradns.com">UltraDNS</A></LI> <LI><A href="http://www.cisco.com/warp/public/cc/pd/nemnsw/nerr/prodlit/cnr30_ov.htm">Cisco Network Registrar</A></LI> <LI><A href="http://www.qip.lucent.com/">QIP</A> These people are obviously hiding something, since they require a password to look up the technical details of their product.</LI> <LI><A href="http://www.incognito.com/products/DNSCommander/overview.jsp">DNS commander</A></LI> <LI><A href="http://www.jhsoft.com/">Simple DNS plus</A>. Only available for Windows. <LI><A href="http://www.menandmice.com/2000/2200_quick_dns.html">Yet another DNS program; this one at least has a Linux port</A> </UL> </div> </td></table> </div> </td></table> </div> </body> </html>