On Friday 31 July 2009 15:52:35 Andrew Clayton wrote: > It's annoying and I'd like to get it working at the firewall. But > for now I think I'm going to take Robby's advice and have a look > at split views with Bind. This also does seem to be the recommended > way to do it. I forgot to mention in my reply, but I've found dnsmasq to be a very good tool for overriding single names in the global DNS. Nothing against BIND, but it's more difficult to set up and maintain, and dnsmasq is more flexible for this purpose. -- Offlist mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html