On 07. 02. 23 7:45, Matthias Fechner wrote:

So if I would like to access idefix.fechner.net it makes a DNS lookup which returns the A record for idefix.fechner.net and it sees it does not belong to my interface so it uses the default gateway to go to my internet provider. It reaches my server in the internet, is routed into the openvpn tunnel and goes through my local firewall through a policy based NAT to a local IP (192.168.200.x). So you see that is not very efficient.

My idea was to hook into the DNS and make sure to not return the IPv4 address 195.30.95.36, but 192.168.0.1 (as all my devices at home are using my local bind here for lookup).

I hope that explain it better what I would like to solve.

It seems to be that you are trying to fix rounting problem/suboptimality in DNS... Perhaps consider routing 195.30.95.36 to the appropriate host in your network directly - that way you don't have to do anything in the DNS.

--
Petr Špaček

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to