Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Jan 2003 00:09:30 +0100
From:      Peter Much <pmc@citylink.dinoex.sub.org>
To:        Terry Lambert <tlambert2@mindspring.com>
Cc:        Peter Much <pmc@citylink.dinoex.sub.org>, Gregory Neil Shapiro <gshapiro@FreeBSD.ORG>, hackers@FreeBSD.ORG
Subject:   Re: sendmail: how to get the named of FreeBSD4.7 standards compliant?
Message-ID:  <20030108000930.A512@disp.oper.dinoex.org>
In-Reply-To: <3E1A1336.9F535670@mindspring.com>; from tlambert2@mindspring.com on Mon, Jan 06, 2003 at 03:37:26PM -0800
References:  <no.id> <20030101181330.C8233@disp.oper.dinoex.org> <3E134659.78028611@mindspring.com> <20030106173652.A495@disp.oper.dinoex.org> <3E1A1336.9F535670@mindspring.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jan 06, 2003 at 03:37:26PM -0800, Terry Lambert wrote:

! > And now I do not think that a "split horizon" configuration could
! > solve my problem at all. Because if it could tell me that my
! > unqualified hostname does not exist (without querying the outside),
! > then it would also tell me that FreeBSD.org does not exist...
! 
! That's not entirely true.
! 
! The normal way to handle this is to define a domain for your
! internal machines, and then make the DNS server authoritative
! for it.  The domain most people use for this is "link.local"
! or ".local", or "example.com".

Done this. It is ".oper.dinoex.org" - I think this should do.

! With your local DNS server being authoritative for that domain
! (having an SOA record for the domain name), then it can tell
! when hosts do or don't exist there.

Done this. So, if I lookup "schnarz.oper.dinoex.org", then I get
"Non-existent host/domain".

! So if I look up an unqualified "froboz", it's assumed to be in
! the local domain because of the DNS suffix every machine is using,
! and every machine is using it, either because you told it to, or
! because that's what the DHCP server told it to use, when it handed
! each machine it's IP address.

Exactly. And when this is not found, then the resolver will
inplicitly issue another query for the unqualified name.

And it is even worse with sendmail, because sendmail does quite
interesting things there - like switching off RES_DEFNAMES - 
so this one will definitely not add the local domain.

regards,
Peter

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030108000930.A512>