On 8.12.2015 09:41, Gerd Hoffmann wrote: > Hi, > >> Start moving away from >> split DNS because that's going to be very hard to support. > > Seriously? How do you suggest to handle DNS for my 192.168.2.0/24 home > network then? Making the forward zone for home.kraxel.org public would > at least work, although I fail to see the point in having public dns > records for private networks. Registering the reverse zone is never > ever going to work though ... For the record, this is an invalid example. Special-use domain names are listed in IANA registry http://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.xhtml It is not a problem to hard-code special-handling for domain names like 10.in-addr.arpa. so validation is not required for them, and that all queries are always forwarded to local DNS servers. Guys around dnssec-trigger actually done that in previous versions. Have you tried it? -- Petr Spacek @ Red Hat -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx