given last nights issues with upcp and named/bind not able to start, my setup of using internal nameservers only obviously hurt me. since i am not hosting it was not a huge problem for me, but for others I can see it as a big problem.

so, what are the issues with using external nameservers? can they be compromised and cause problems? obviously if they go down, so do you if you are limited to a single external box.

is there a way to force your own box to use the internal nameserver first and then switch to using an external one?

i ended up adding the EV1 nameserver IP to my resolv.conf and I was able to get up2date to run, but is that a reliable IP?

I have exactly the same question and have been wondering this for awhile now... unfortunately CPanel bit me before I had any resolution.

I have a Windows Server with EV1 that is not running DNS at the moment, and wonder if that would be a good fail-over. However, I think it would require some kind of configuration in Server Command to do this and there doesn't seem to be any documentation on how.

Ohv,

I'm wondering the same thing. I had to add the ev1 servers in order to get the up2date rpm. I'm wondering if I should leave it in or not.

Leave it, I usually put the local server at the top but then put 1-2 other nameservers for the ISP which in this case is ev1. There were some people that had trouble even with them, though I am not 100% sure what was wrong there since I did not see any, which is why I offered the url with an IP address.

You will not have any problems doing that and it may even help speed a little bit.

But just putting the EV1 Nameserver IP in the resolver config won't help to resolve TO sites on your server if it's not listed in the domain's registration and configured on the EV1 nameserver through servercommand.

Correct but he was talking more along the lines of resolving external sites.

Note you can use your own AND external at once which is idea. Technically they could be exploited but the chances of ev1's nameservers gettgin exploited is low and even lower yet of them not noticing. Another important thing is that if they were exploited it would just cause problems resolving domains it would not cause any actual possible ways of accessing your server.