Firewall and DNS caching without NetworkManager

[আনন্দ কুমার সমাদ্দার Ananda Samaddar]

Hello all,

I've just installed Fedora 18 X86-64.  I disabled and uninstalled
networkmanager and use the standard networking stuff which seems to
use dhclient. I'm using a standard ethernet connection.

So I need to do two things.  Feel free to tell me to RTFM if you can
provide a link!

1.  How do I enable pre-pending of nameservers?  I want to use dnsmasq
to cache DNS requests so I need to add 127.0.0.1 to the top of
resolv.conf.  Google searchs take me to the Arch Wiki.  I can't seem to
find a dhclient.conf file anywhere in /etc.

2.  How do I assign a zone in firewalld to my connection?  I want to be
able to open ports for bittorrent and XMPP jingle voice/video.  The
firewalld wiki on the Fedora site doesn't seem to be able to answer my
question.

thanks in advance,

Ananda Samaddar

[Mikkel L. Ellertson]

On 05/18/2013 08:41 AM, আনন্দ কুমার সমাদ্দার Ananda Samaddar wrote:
> Hello all,
>
> I've just installed Fedora 18 X86-64.  I disabled and uninstalled
> networkmanager and use the standard networking stuff which seems to
> use dhclient. I'm using a standard ethernet connection.
>
> So I need to do two things.  Feel free to tell me to RTFM if you can
> provide a link!
> How do I enable pre-pending of nameservers?  I want to use dnsmasq
>
> to cache DNS requests so I need to add 127.0.0.1 to the top of
> resolv.conf.  Google searchs take me to the Arch Wiki.  I can't seem to
> find a dhclient.conf file anywhere in /etc.
> How do I assign a zone in firewalld to my connection?  I want to be
>
> able to open ports for bittorrent and XMPP jingle voice/video.  The
> firewalld wiki on the Fedora site doesn't seem to be able to answer my
> question.
>
> thanks in advance,
>
> Ananda Samaddar

You may want to read /usr/share/doc/initscripts-9.42.2/sysconfig.txt
- search for PEERDNS.

Mikkel

[আনন্দ কুমার সমাদ্দার Ananda Samaddar]

On Sat, 18 May 2013 08:58:41 -0500
"Mikkel L. Ellertson"  wrote:
> On 05/18/2013 08:41 AM, আনন্দ কুমার সমাদ্দার Ananda Samaddar wrote:
> > Hello all,
> >
> > I've just installed Fedora 18 X86-64.  I disabled and uninstalled
> > networkmanager and use the standard networking stuff which seems to
> > use dhclient. I'm using a standard ethernet connection.
> >
> > So I need to do two things.  Feel free to tell me to RTFM if you can
> > provide a link!
> > How do I enable pre-pending of nameservers?  I want to use
> >
> > dnsmasq to cache DNS requests so I need to add 127.0.0.1 to the top
> > of resolv.conf.  Google searchs take me to the Arch Wiki.  I can't
> > seem to find a dhclient.conf file anywhere in /etc.
> > How do I assign a zone in firewalld to my connection?  I want
> >
> > to be able to open ports for bittorrent and XMPP jingle
> > voice/video.  The firewalld wiki on the Fedora site doesn't seem to
> > be able to answer my question.
> >
> > thanks in advance,
> >
> > Ananda Samaddar
>
> You may want to read /usr/share/doc/initscripts-9.42.2/sysconfig.txt
> search for PEERDNS.
>
> Mikkel

Thanks Mikkel but I don't think this works.  In the ifcfg settings if
you specify a DNS server then the network is assumed to have static
DNS.  So if I put DNS1=127.0.0.1 in the the ifcfg-em1 file all I get in
resolv.conf is that nameserver and not the one supplied by my router
underneath.

Ananda

[আনন্দ কুমার সমাদ্দার Ananda Samaddar]

On Sat, 18 May 2013 15:18:15 +0100
আনন্দ কুমার সমাদ্দার Ananda Samaddar  wrote:
> On Sat, 18 May 2013 08:58:41 -0500
> "Mikkel L. Ellertson"  wrote:
> > On 05/18/2013 08:41 AM, আনন্দ কুমার সমাদ্দার Ananda Samaddar wrote:
> > > Hello all,
> > >
> > > I've just installed Fedora 18 X86-64.  I disabled and uninstalled
> > > networkmanager and use the standard networking stuff which seems
> > > to use dhclient. I'm using a standard ethernet connection.
> > >
> > > So I need to do two things.  Feel free to tell me to RTFM if you
> > > can provide a link!
> > > How do I enable pre-pending of nameservers?  I want to use
> > >
> > > dnsmasq to cache DNS requests so I need to add 127.0.0.1 to the
> > > top of resolv.conf.  Google searchs take me to the Arch Wiki.  I
> > > can't seem to find a dhclient.conf file anywhere in /etc.
> > > How do I assign a zone in firewalld to my connection?  I want
> > >
> > > to be able to open ports for bittorrent and XMPP jingle
> > > voice/video.  The firewalld wiki on the Fedora site doesn't seem
> > > to be able to answer my question.
> > >
> > > thanks in advance,
> > >
> > > Ananda Samaddar
> >
> > You may want to read /usr/share/doc/initscripts-9.42.2/sysconfig.txt
> > search for PEERDNS.
> >
> > Mikkel
>
> Thanks Mikkel but I don't think this works.  In the ifcfg settings if
> you specify a DNS server then the network is assumed to have static
> DNS.  So if I put DNS1=127.0.0.1 in the the ifcfg-em1 file all I get
> in resolv.conf is that nameserver and not the one supplied by my
> router underneath.
>
> Ananda

Apologies for replying to myself.  Issue one has been fixed by creating
the file /etc/dhcp/dhclient-em1.conf and adding the line "prepend
domain-name-servers 127.0.0.1;" to the file.  I still need some info on
firewalld zones though.

Ananda

[Bruno Wolff III]

On Sat, May 18, 2013 at 15:18:15 +0100,
   আনন্দ কুমার সমাদ্দার Ananda Samaddar  wrote:
> On Sat, 18 May 2013 08:58:41 -0500
>
> Thanks Mikkel but I don't think this works.  In the ifcfg settings if
> you specify a DNS server then the network is assumed to have static
> DNS.  So if I put DNS1=127.0.0.1 in the the ifcfg-em1 file all I get in
> resolv.conf is that nameserver and not the one supplied by my router
> underneath.

Arguably that's what you want (barring wifi places that break dns 
to make capture portals work for authentication). If you use a resolving 
cache (such as ndjbdns) than you don't need to use the ISP dns. This saves 
from stupid ISP tricks (such as rewriting TTLs).

[Matthew Miller]

On Sat, May 18, 2013 at 02:41:56PM +0100, আনন্দ কুমার সমাদ্দার Ananda Samaddar wrote:
> How do I assign a zone in firewalld to my connection?  I want to be
>
> able to open ports for bittorrent and XMPP jingle voice/video.  The
> firewalld wiki on the Fedora site doesn't seem to be able to answer my
> question.

put "ZONE=zonename" in the ifcfg file for the interface/network.

[Thomas Woerner]

On 05/18/2013 03:41 PM, আনন্দ কুমার সমাদ্দার Ananda Samaddar wrote:
> Hello all,
>
> I've just installed Fedora 18 X86-64.  I disabled and uninstalled
> networkmanager and use the standard networking stuff which seems to
> use dhclient. I'm using a standard ethernet connection.
>
> So I need to do two things.  Feel free to tell me to RTFM if you can
> provide a link!
> How do I enable pre-pending of nameservers?  I want to use dnsmasq
>
> to cache DNS requests so I need to add 127.0.0.1 to the top of
> resolv.conf.  Google searchs take me to the Arch Wiki.  I can't seem to
> find a dhclient.conf file anywhere in /etc.
> How do I assign a zone in firewalld to my connection?  I want to be
>
> able to open ports for bittorrent and XMPP jingle voice/video.  The
> firewalld wiki on the Fedora site doesn't seem to be able to answer my
> question.

Just add ZONE=<name> to the ifcfg file for the interface to set the zone 
for the interface. If ZONE is not set or empty, the default zone for the 
system will be used. Please have a look at 
https://fedoraproject.org/wiki/FirewallD for more information.
> thanks in advance,
>
> Ananda Samaddar

Regards,
Thomas