My client's host has his site on an Open DNS server (his orders are WAY down from what they were before he moved to this host and his rank has not changed so I suspect it is due to an open dns).
The host sent this response and I'm just wondering if he knows what he's doing and if what he said is true. I'm not a programmer or server administrator so I'm not sure. The site is on a Windows Server:
"DNS recursion basically means that a DNS server will go out and find an answer to a query from a remote name server on a domain for which it is not authoritative. The downside to this is that “bad guys” can potentially use a recursive DNS server in the same fashion as they can do bad things with open SMTP relays. However, my DNS servers are behind firewalls that would protect against these sorts of attacks against recursive name servers. In the future, I will separate the functions of DNS authority vs. DNS recursion. I’ll do this by having separate name servers that just do recursive lookups from IP addresses which I allow, and a separate bank of name servers that will only act as authoritative name servers; and not doing recursive lookups at all. However, I don’t have a date when this will happen, as it is a very large project, and one that needs to happen without DNS interruption."
The client's traffic went down after bailout in Sept but is higher now than what it was before the bailout. So traffic is ok. The client moved to this new host last june and open DNS was never fixed although he requested it then. I just discovered that it was never fixed so requested it again.
I'm just wanting to know if what that host said was accurate re the set up of DNS on a windows server. This is the first time I've had a host hem and haw about fixing it.