Re: [opensuse] Advice and Help with Split DNS



David C. Rankin wrote:

Per, Chuck,

Why split at all if you are dealing with a single subnet? (that's just my
question -- being curious) What do you gain by having different views? I simply
have a single forward and reverse zone without any splitting on my LAN with 2
backup DNS servers.

However, I have no 'outside/internet' clients who would need DNS information
that don't get it by virtue of vpn, etc. For external name resolution, I just
add A and CNAME records for my external access boxes at my domain name hosting
site.

What benefit do you get from splitting a local bind install to have different
views?

Just imagine you are one of these unfortunate europeans that don't have public
ips en mass. That means you use NAT and private ip addresses in your internal
network. If the internal servers want to talk to servers, you want bind to
resolve to the internal addresses, if it is a remote client from the internat
that is talking to the server via public ip and port-forwarding, then of
course that client needs the public ip address of the firewall.

For example I have a citrix server in our network. If the user plugs his
notebook into the internal network, the hostname resolves to the internal
address, if he is at home, the hostname returns the public ip.


--
Sandy

List replies only please!
Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx



Relevant Pages

  • Re: [opensuse] Advice and Help with Split DNS
    ... What benefit do you get from splitting a local bind install to have different ... If the internal servers want to talk to servers, ... if it is a remote client from the internat ... addresses resolve to private IPs. ...
    (SuSE)
  • [fw-wiz] DMZ and critical data
    ... I am doing a project of network security to a friend of mine. ... We will do a back-to-back DMZ, with a external and a internat firewall. ... The webserver needs access to a file and a database server, ...
    (Firewall-Wizards)
  • Re: [opensuse] Advice and Help with Split DNS
    ... What benefit do you get from splitting a local bind install to have different ... If the internal servers want to talk to servers, ... if it is a remote client from the internat ... use this to resolve external names names directly to internal ...
    (SuSE)