MaraDNS | |
Developer: | Sam Trenholme |
Latest Release Version: | 3.5.0036 |
Latest Release Date: | [1] |
Operating System: | Unix-like, Windows |
Genre: | DNS server |
License: | BSD license |
Website: | https://maradns.samiam.org/ |
Standard: | RFC1034, RFC1035 |
MaraDNS is an open-source (BSD licensed) Domain Name System (DNS) implementation, which acts as either a caching, recursive, or authoritative nameserver.[2] [3] [4]
MaraDNS has a string library, which is buffer overflow resistant and has its own random number generator. While MaraDNS does not directly support BIND zone files, its zone file format is similar and a converter to convert from BIND's zone file format is included.[5] MaraDNS runs as an unprivileged user inside of a chroot environment, while MaraDNS specifies the user and group to run as by user-ID, Simon Burnet has made a patch that makes it possible to supply a username [6] MaraDNS can add both IP records and the corresponding PTR "reverse DNS lookup" record.[7] It can be used as a master DNS server, and, with some caveats, as a slave DNS server.[8] MaraDNS currently does not support DNSSEC because of a lack of money for the developer to implement it using the LibTom library.[9]
Deadwood includes built-in "DNS wall" filtering (to protect against external domains which resolve to local IPs), the ability to read and write the cache to a file, DNS-over-TCP support, the ability to optionally reject MX, IPv6 AAAA, and PTR queries, code that stops AR-spoofing attacks, among other features.[10]
MaraDNS releases are distributed with a BSD-type license.[11]