Date: Thu, 03 Nov 2011 10:35:41 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: freebsd-questions@freebsd.org Subject: Re: DNS config help Message-ID: <4EB26E7D.3020105@infracaninophile.co.uk> In-Reply-To: <4EB2662A.2010609@my.gd> References: <alpine.BSF.2.00.1111022050300.6875@mail.neu.net> <4EB247E7.1010708@infracaninophile.co.uk> <4EB2662A.2010609@my.gd>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig0D14D87DB06F8E2EA54CC339
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
On 03/11/2011 10:00, Damien Fleuriot wrote:
> You can simply create a forward zone.
Actually, yes, that's a good idea too. Should have much the same effect
and it's been available in BIND approximately forever. There's
difference in the niggling details of how it all works, so worth
experimenting with the different possibilities.
>>> When I am connected to the VPN, vpn.example.com, I want queries for
>>> >> anything going to example.com to go a specific DNS, and everythin=
g else
>>> >> on 10.x to go to my regular DNS. Please let me know if I need to
>>> >> provide more info. Thanks in advance for any help.
>> >=20
>> > Hmmm.... I don't think you're going to have much fun at all if you t=
ry
>> > and modify your named configuration depending on whether your VPN is=
up
>> > or not. DNS TTLs are generally of the order of days -- that should =
be
>> > taken as a measure of the minimum time that should go between restar=
ts
>> > of a recursive DNS (ideally, and as a long term average). Better to=
>> > just fail the lookup when the VPN is down.
>> >=20
> Actually, using a view that matches only the VPN's IP range would do th=
e
> trick easily and efficiently.
Views are a way of giving a different answer depending on who is asking
the question -- how does that help the OP when he's always querying from
within his 10.0.0.0/8 network? He's the client connecting to the VPN her=
e.
--=20
Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard
Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate
JID: matthew@infracaninophile.co.uk Kent, CT11 9PW
--------------enig0D14D87DB06F8E2EA54CC339
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk6yboQACgkQ8Mjk52CukIyfKQCeOVLWj8BDhjv6ViYsTRT1LY8m
HfQAn3E9Wg5JnrkjHsxtywxIJ386sHQn
=Eno8
-----END PGP SIGNATURE-----
--------------enig0D14D87DB06F8E2EA54CC339--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4EB26E7D.3020105>