Firewall and DNS caching without NetworkManager

Bruno Wolff III bruno at wolff.to
Sat May 18 15:40:40 UTC 2013


On Sat, May 18, 2013 at 15:18:15 +0100,
   আনন্দ কুমার সমাদ্দার Ananda Samaddar <ananda at samaddar.co.uk> wrote:
>On Sat, 18 May 2013 08:58:41 -0500
>
>Thanks Mikkel but I don't think this works.  In the ifcfg settings if
>you specify a DNS server then the network is assumed to have static
>DNS.  So if I put DNS1=127.0.0.1 in the the ifcfg-em1 file all I get in
>resolv.conf is that nameserver and not the one supplied by my router
>underneath.

Arguably that's what you want (barring wifi places that break dns 
to make capture portals work for authentication). If you use a resolving 
cache (such as ndjbdns) than you don't need to use the ISP dns. This saves 
from stupid ISP tricks (such as rewriting TTLs).


More information about the users mailing list