Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Dave Warren
On 2015-11-02 15:03, Carl Byington wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2015-10-30 at 12:38 -0400, Bill wrote: >What I would like to do to have the ability to query a DNS server >located behind a NAT, and have it return the IP of the NAT, and setup >connection tracking i

Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2015-10-30 at 12:38 -0400, Bill wrote: > What I would like to do to have the ability to query a DNS server > located behind a NAT, and have it return the IP of the NAT, and setup > connection tracking in the NAT to pass traffic thru to the host

Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Bill
I was thinking of doing the DNS and the NAT on the same device, then (I assume) the DNS could use connection tracking hooks to add 'expectations' to the NAT. Anyhow, that was what I was hoping, but I've not been able to find out much about anyone having done such a thing, so I might be dreaming