On 01/05/2021 17:28, Jack Craig wrote:


On Sat, May 1, 2021 at 2:19 AM Ed Greshko <ed.gres...@greshko.com 
<mailto:ed.gres...@greshko.com>> wrote:


    2.  Configure your DNS server with, I think the correct term is "views", 
such that an
    internal system query returns internal IP addresses (10.0.0.X) and an 
internal query
    allows recursion.

    #1 is easy
    #2 requires research and work.


I'll hold off deciding this for the moment, i need some sleep, ...

Still, i got a start on views/zones and /etc/named.conf is currently setup as ..
*
*
*view "wan-view"
{
zone "linuxlighthouse.com <http://linuxlighthouse.com>" {
           type master;
           file "/var/named/linuxlighthouse.com.db";
           allow-update { none; };
};

        zone "." IN {
           type hint;
           file "named.ca <http://named.ca>";
        };
};*


BTW, if you decide to go ahead with using views it would be helpful if you have
a system on the "outside" for you to use to test queries.

As I understand it, all your "internal" systems have 10.0.0.X IP addresses.

But, I recall that your ws host does have a virbr0 interface. Meaning it is 
already
configured for the creation of Virtual Machines.

So, you could deploy a VM which would acquire a 192.168.122.X address.
Then you treat that IP range as part of the WAN while your 10.0.0.X addresses
are your LAN.  Now you can test views from "inside" as well as "outside".

--
Remind me to ignore comments which aren't germane to the thread.

_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to