On 01/05/2021 16:31, Ed Greshko wrote:
After I sent the previous post I realized what I *think* is your goal. If I recall you're wanting your
DNS server to service queries from inside your network as well as from outside.
As currently configured your DNS server is acting as an external/public server only.
So this....
2. You now want to fix your named.conf to have "recursion no;" The default is "yes".
You don't want your DNS server acting as a server every domain. If someone queries
your server directly you want it to return (using cnn.com as the example).
Host cnn.com not found: 5(REFUSED)
Would also result in this....
[egreshko@f33k ~]$ host cnn.com localhost
Using domain server:
Name: localhost
Address: ::1#53
Aliases:
Host cnn.com not found: 5(REFUSED)
Which is certainly not what you'd want.
There are, in my mind, 2 schools of thought on "fixing" this.
1. If you have a small number of system in your local network just let them query
external DNS servers such as your ISP's DNS server. You can handle exception using
the /etc/hosts file.
2. Configure your DNS server with, I think the correct term is "views", such that an
internal system query returns internal IP addresses (10.0.0.X) and an internal query
allows recursion.
#1 is easy
#2 requires research and work.
--
Remind me to ignore comments which aren't germane to the thread.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
