Re: Misc questionning about DNS

2015-01-14 Thread sven falempin
On Wed, Jan 14, 2015 at 4:41 AM, Craig Skinner wrote: > On 2015-01-13 Tue 16:26 PM |, sven falempin wrote: >> >> I would like to internally and externally solve some domain names >> differently (so some service are accessible from inside and outside >> without some fancy NAT or worse), I found out

Re: Misc questionning about DNS

2015-01-14 Thread Craig Skinner
On 2015-01-13 Tue 16:26 PM |, sven falempin wrote: > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and outside > without some fancy NAT or worse), I found out 'some' call this setup a > 'split-dns', often use for inter

Re: Misc questionning about DNS

2015-01-14 Thread Kapetanakis Giannis
On 14/01/15 02:33, Jason Adams wrote: On 01/13/2015 01:26 PM, sven falempin wrote: Dear OpenBSD users, Recently unbound made his way in base, pushing the complex bind/named out for our own good. I would like to internally and externally solve some domain names differently (so some service are

Re: Misc questionning about DNS

2015-01-14 Thread Stuart Henderson
On 2015-01-13, sven falempin wrote: > Dear OpenBSD users, > > Recently unbound made his way in base, pushing the complex bind/named > out for our own good. > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and outside >

Re: Misc questionning about DNS

2015-01-13 Thread Adriaan
In https://kb.isc.org/article/AA-00874/0/Best-Practices-for-those-running-Recursive-Servers.html one of the recommendations is to separate the two roles: "Do not combine authoritative and recursive nameserver functions -- have each function performed by separate server sets" On Wed, Jan 14, 2015

Re: Misc questionning about DNS

2015-01-13 Thread Nick Holland
On 01/13/15 16:26, sven falempin wrote: > Dear OpenBSD users, > > Recently unbound made his way in base, pushing the complex bind/named > out for our own good. > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and outsi

Re: Misc questionning about DNS

2015-01-13 Thread Jonathon Sisson
On Tue, Jan 13, 2015 at 04:33:56PM -0800, Jason Adams wrote: > Split DNS is a very good reason for using bind, and its not that hard to set > up. > I could private email you an example. > > If unbound doesn't do this, it is missing one of the main reasons people and > institutions > run their ow

Re: Misc questionning about DNS

2015-01-13 Thread Jason Adams
On 01/13/2015 01:26 PM, sven falempin wrote: > Dear OpenBSD users, > > Recently unbound made his way in base, pushing the complex bind/named > out for our own good. > > I would like to internally and externally solve some domain names > differently (so some service are accessible from inside and ou