Hidden Primary DNS without NS RR
in Plesk it is impossible to configure the SOA Primary Nameserver without a NS RR.
The SOA template should support Hidden Primary NameServer and the Zone file generation should always use the Hidden Primary NameServer in the Domain SOA entry.
Example:
@ IN SOA ns1.hidden-primary.tld ...
...
domain.tld. IN NS ns1.secondary.tld.
domain.tld. IN NS ns2.secondary.tld.
Frank
shared this idea
Thank you for your input! We will consider this functionality in upcoming releases if it becomes popular.
Everyone, please continue voting for this feature if you consider it important.
-- SH
-
Frank
commented
a primary nameserver with a NS RR is not hidden.
If we try to configure a .de Domain with a hidden primary, and the Plesk Zone file contains the hidden primary in a NS RR, the the German denic.de reject this update.
When i patch the Zone file and remove the primary NS RR, than the update completes successful.
We think, that a hidden primary nameserver is a security feature for our server.
All DNS request handled by the secondary nameservers and a DNS attack doesn't increase the load on our server.