linux-admin.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: "Adrian C." <foo@foo.teinet.ro>
To: linux-admin@vger.kernel.org
Subject: Re: DNS Problem
Date: Sat, 28 Jan 2006 00:09:25 +0200	[thread overview]
Message-ID: <7.0.0.16.0.20060128000021.01ccad78@foo.teinet.ro> (raw)
In-Reply-To: <17370.34385.483757.298519@cerise.gclements.plus.com>


Or you could just set an entry like

10.21.23.20      mail.yourdomain.org

on every client machine (/etc/hosts or 
%windir%\system32\drivers\etc\hosts (could be different for win2k)).

You could set that up using a logon script (active directory or 
samba, doesn't matter), or by tricking users with candy to run the 
script manually :)

--Adrian.

At 10:45 PM 1/27/2006, Glynn Clements wrote:

>gerardo juarez-mondragon wrote:
>
> > I have the following situation
> >
> >      internet                  internet
> >         |                         |
> >         |                         |
> >     mail server   -----------  firewall
> >    (10.21.23.20)             (10.21.23.21)
> >                                   |
> >                                   |
> >                               intranet
> >
> >                             (192.168.x.x)
> >
> > The firewall is also a caching DNS, to speed up
> > lookups and overcome DNS server downtime. My
> > problem is that when I lookup the mail server
> > the address I receive from 10.21.23.21 is the
> > external address, as seen from outside.
> > I would like the address to be solved for
> > internal machines as the shortcut 10.21.23.20.
> > The routes are correct according to traceroute.
> >
> > I thought that if I modified the firewall's
> > /etc/hosts including the address of the mail
> > server as 10.21.23.20 and setting nsswitch.conf
> > to  hosts: files dns
> > would make it work, but they cached address seems
> > to have priority.
>
>A DNS server is exactly that: a DNS server. Local name-service
>mechanisms (/etc/hosts, /etc/host.conf, /etc/nsswitch.conf etc) only
>affect the results of gethostbyname() and similar functions, and won't
>have any effect upon the behaviour of named or other DNS daemons, or
>any programs which perform DNS queries directly (e.g. most MTAs).
>
>If the DNS server is running BIND 9.x, you can use the "view"
>statement to provide different information for a domain depending upon
>who is asking. The view statement is described in sections 6.2.19 and
>6.2.20 of the BIND Administrator Reference Manual.
>
>--
>Glynn Clements <glynn@gclements.plus.com>
>-
>To unsubscribe from this list: send the line "unsubscribe linux-admin" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html


  reply	other threads:[~2006-01-27 22:09 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-01-26 19:52 DNS Problem gerardo juarez-mondragon
     [not found] ` <189847C2744EDE44B939F4DD231B356A@gjuarezmondragon.metacraw ler.com>
2006-01-26 20:33   ` urgrue
2006-01-27 20:45 ` Glynn Clements
2006-01-27 22:09   ` Adrian C. [this message]
2006-01-28  3:57     ` Stephen Samuel
  -- strict thread matches above, loose matches on Subject: below --
2006-02-16  2:10 gerardo juarez-mondragon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=7.0.0.16.0.20060128000021.01ccad78@foo.teinet.ro \
    --to=foo@foo.teinet.ro \
    --cc=linux-admin@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).