# Install djbdns with Homebrew, apk, apt, MacPorts, Nix D.J. Bernstein's DNS tools. Version 1.05 via Homebrew; verified 2026-06-09. ## Install ```sh sudo av install brew:djbdns ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install djbdns ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install djbdns ``` Evidence: MacPorts ports tree: net/djbdns/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add djbdns ``` Evidence: Alpine Linux edge package indexes: djbdns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install axfrdns ``` Evidence: Debian stable package indexes: axfrdns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#djbdns ``` Evidence: nixpkgs package indexes: pkgs/by-name/dj/djbdns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:djbdns - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.05 - **Source summary:** D.J. Bernstein's DNS tools - **Homepage:** - **Upstream docs:** - **License:** LicenseRef-Homebrew-public-domain - **Source archive:** - **Last updated:** 2026-06-09T15:08:27+02:00 - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - axfr-get (cli) - axfrdns (cli) - axfrdns-conf (cli) - dnscache (cli) - dnscache-conf (cli) - dnsfilter (cli) - dnsip (cli) - dnsipq (cli) - dnsmx (cli) - dnsname (cli) - dnsq (cli) - dnsqr (cli) - dnstrace (cli) - dnstracesort (cli) - dnstxt (cli) - pickdns (cli) - pickdns-conf (cli) - pickdns-data (cli) - random-ip (cli) - rbldns (cli) - rbldns-conf (cli) - rbldns-data (cli) - tinydns (cli) - tinydns-conf (cli) - tinydns-data (cli) - tinydns-edit (cli) - tinydns-get (cli) - walldns (cli) - walldns-conf (cli) - axfr-get (alias) - axfrdns (alias) - axfrdns-conf (alias) - dnscache (alias) - dnscache-conf (alias) - dnsfilter (alias) - dnsip (alias) - dnsipq (alias) - dnsmx (alias) - dnsname (alias) - dnsq (alias) - dnsqr (alias) - dnstrace (alias) - dnstracesort (alias) - dnstxt (alias) - pickdns (alias) - pickdns-conf (alias) - pickdns-data (alias) - random-ip (alias) - rbldns (alias) - rbldns-conf (alias) - rbldns-data (alias) - tinydns (alias) - tinydns-conf (alias) - tinydns-data (alias) - tinydns-edit (alias) - tinydns-get (alias) - walldns (alias) - walldns-conf (alias) ## Dependencies - daemontools - ucspi-tcp ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 1.05 - Package-manager updated: 2026-06-09 - Local data: ok - Upstream repository: https://cr.yp.to/djbdns.html - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage djbdns is D. J. Bernstein's suite of Unix DNS tools, including dnscache for recursive caching, tinydns for authoritative DNS service, rbldns for DNS blocklist-style zones, and command-line query/debugging programs. It is old, deliberately small, and historically important because it presented a security-conscious alternative to monolithic BIND deployments. ### Project history The official djbdns site organizes the package around separate DNS jobs: finding addresses with dnscache, publishing addresses with tinydns and related servers, and debugging DNS with small command-line tools. The installation page identifies 1.05 as the published djbdns package and states that djbdns works under Unix. Bernstein's documentation emphasized operational separation: caches and authoritative servers should run as distinct services, often on different IP addresses. The package's daemontools-style service directories and generated `/etc/dnscache` and `/etc/tinydns` trees made that model visible to Unix administrators. ### Adoption history djbdns adoption was shaped by DNS security culture in the early 2000s. The official security guarantee offered a bounty for verifiable holes in the published 1.05 release and explicitly contrasted djbdns with buffer-overflow classes that had affected BIND and resolver libraries. The official run-cache and run-server guides asked operators to publish pages saying their DNS cache or server was powered by djbdns, an early-web adoption tactic meant to make deployments searchable and encourage support services and related tools. ### How it is used Package users generally install djbdns for its individual Unix commands rather than a single daemon. `dnscache-conf` creates a cache service, `tinydns-conf` creates an authoritative service, `tinydns-data` compiles zone data, and query tools such as `dnsq`, `dnsqr`, and `dnstrace` help debug DNS behavior. ### Why package nerds care djbdns matters in package history because it is a classic DJB-style toolset: small C programs, unusual configuration conventions, strong opinions about privilege separation, and a long afterlife in Unix package managers. It is also a useful example of software whose official distribution predates modern public source hosting, so a package can be historically important without having an official GitHub-style repository. ### Timeline - 2001-era: Official installation page names djbdns 1.05 as the published package. - Early 2000s: Official security guarantee advertises a public bounty for verifiable security holes. - Operational era: Official guides document dnscache, tinydns, rbldns, walldns, axfrdns, and DNS debugging utilities as separate Unix services and tools. ### Related projects - Related DNS packages include BIND, Unbound, NSD, Knot DNS, PowerDNS, MaraDNS, daemontools, and ucspi-tcp; djbdns is often discussed alongside them because of its separated cache/server design and DJB ecosystem conventions. ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/tinydns/root/data, /etc/dnscache/root/ip/127.0.0.1, /etc/dnscache/seed ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** djbdns - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Other Package-Manager Records - Debian apt - axfrdns - 1:1.05-22: normalized package name match | Debian stable package indexes: axfrdns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | DNS zone-transfer server | http://cr.yp.to/djbdns.html - Debian apt - djbdns-conf - 1:1.05-22: normalized package name match | Debian stable package indexes: djbdns-conf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | programs to create service directories | http://cr.yp.to/djbdns.html - Debian apt - djbdns-utils - 1:1.05-22: normalized package name match | Debian stable package indexes: djbdns-utils from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | dns debugging tools | http://cr.yp.to/djbdns.html - Debian apt - dnscache - 1:1.05-22: normalized package name match | Debian stable package indexes: dnscache from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | DNS cache - tool for finding addresses of Internet hosts | http://cr.yp.to/djbdns.html - Debian apt - rbldns - 1:1.05-22: normalized package name match | Debian stable package indexes: rbldns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | real time blackhole list server | http://cr.yp.to/djbdns.html - Debian apt - tinydns - 1:1.05-22: normalized package name match | Debian stable package indexes: tinydns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | DNS server - tool for publishing addresses of Internet hosts | http://cr.yp.to/djbdns.html - Debian apt - walldns - 1:1.05-22: normalized package name match | Debian stable package indexes: walldns from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | reverse DNS wall | http://cr.yp.to/djbdns.html - Nix - djbdns: normalized package name match | nixpkgs package indexes: pkgs/by-name/dj/djbdns/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - axfrdns - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: axfrdns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | DNS zone-transfer server | http://cr.yp.to/djbdns.html - Ubuntu apt - djbdns-conf - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: djbdns-conf from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | programs to create service directories | http://cr.yp.to/djbdns.html - Ubuntu apt - djbdns-utils - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: djbdns-utils from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | dns debugging tools | http://cr.yp.to/djbdns.html - Ubuntu apt - dnscache - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: dnscache from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | DNS cache - tool for finding addresses of Internet hosts | http://cr.yp.to/djbdns.html - Ubuntu apt - rbldns - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: rbldns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | real time blackhole list server | http://cr.yp.to/djbdns.html - Ubuntu apt - tinydns - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: tinydns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | DNS server - tool for publishing addresses of Internet hosts | http://cr.yp.to/djbdns.html - Ubuntu apt - walldns - 1:1.05-15ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: walldns from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | reverse DNS wall | http://cr.yp.to/djbdns.html - apk - djbdns - 1.05-r55: normalized package name match | Alpine Linux edge package indexes: djbdns from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Excellent high-performance DNS services | https://cr.yp.to/djbdns.html ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Web development packages](https://www.automicvault.com/pkg/web-dev-tools/) - Matched web development metadata. - [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider. - [daemontools](https://www.automicvault.com/pkg/brew/daemontools/) - Runtime dependency declared by Homebrew. - [ucspi-tcp](https://www.automicvault.com/pkg/brew/ucspi-tcp/) - Runtime dependency declared by Homebrew. - [adns](https://www.automicvault.com/pkg/brew/adns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [c-ares](https://www.automicvault.com/pkg/brew/c-ares/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [doh](https://www.automicvault.com/pkg/brew/doh/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [getdns](https://www.automicvault.com/pkg/brew/getdns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [hickory-dns](https://www.automicvault.com/pkg/brew/hickory-dns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [knot-resolver](https://www.automicvault.com/pkg/brew/knot-resolver/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [massdns](https://www.automicvault.com/pkg/brew/massdns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. - [nextdns](https://www.automicvault.com/pkg/brew/nextdns/) - Shares av.db curated category or tags: cli, dns, networking, resolver. ## Combined YAML source View the package source record on GitHub. [combined/djbdns.yml](https://github.com/automic-vault/db/blob/main/combined/djbdns.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph