On 01/05/2021 17:28, Jack Craig wrote:
On Sat, May 1, 2021 at 2:19 AM Ed Greshko <ed.greshko(a)greshko.com
<mailto:ed.greshko@greshko.com>> wrote:
2. Configure your DNS server with, I think the correct term is "views",
such that an
internal system query returns internal IP addresses (10.0.0.X) and an internal query
allows recursion.
#1 is easy
#2 requires research and work.
I'll hold off deciding this for the moment, i need some sleep, ...
Still, i got a start on views/zones and /etc/named.conf is currently setup as ..
*
*
*view "wan-view"
{
zone "linuxlighthouse.com <
http://linuxlighthouse.com>" {
type master;
file "/var/named/linuxlighthouse.com.db";
allow-update { none; };
};
zone "." IN {
type hint;
file "named.ca <
http://named.ca>";
};
};*
BTW, if you decide to go ahead with using views it would be helpful if you have
a system on the "outside" for you to use to test queries.
As I understand it, all your "internal" systems have 10.0.0.X IP addresses.
But, I recall that your ws host does have a virbr0 interface. Meaning it is already
configured for the creation of Virtual Machines.
So, you could deploy a VM which would acquire a 192.168.122.X address.
Then you treat that IP range as part of the WAN while your 10.0.0.X addresses
are your LAN. Now you can test views from "inside" as well as
"outside".
--
Remind me to ignore comments which aren't germane to the thread.