On 01/05/2021 17:28, Jack Craig wrote:
On Sat, May 1, 2021 at 2:19 AM Ed Greshko <ed.greshko@xxxxxxxxxxx <mailto:ed.greshko@xxxxxxxxxxx>> wrote: 2. Configure your DNS server with, I think the correct term is "views", such that an internal system query returns internal IP addresses (10.0.0.X) and an internal query allows recursion. #1 is easy #2 requires research and work. I'll hold off deciding this for the moment, i need some sleep, ... Still, i got a start on views/zones and /etc/named.conf is currently setup as .. * * *view "wan-view" { zone "linuxlighthouse.com <http://linuxlighthouse.com>" { type master; file "/var/named/linuxlighthouse.com.db"; allow-update { none; }; }; zone "." IN { type hint; file "named.ca <http://named.ca>"; }; };*
BTW, if you decide to go ahead with using views it would be helpful if you have a system on the "outside" for you to use to test queries. As I understand it, all your "internal" systems have 10.0.0.X IP addresses. But, I recall that your ws host does have a virbr0 interface. Meaning it is already configured for the creation of Virtual Machines. So, you could deploy a VM which would acquire a 192.168.122.X address. Then you treat that IP range as part of the WAN while your 10.0.0.X addresses are your LAN. Now you can test views from "inside" as well as "outside". -- Remind me to ignore comments which aren't germane to the thread. _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure