Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: DNS setup
From: Leonardo Bentes <leo @ pangeia . com . br>
Date: Fri, 29 Aug 1997 11:30:06 -0300 (EST)
To: firewalls @ GreatCircle . COM
In-reply-to: <3 . 0 . 2 . 32 . 19970829072237 . 0098e4a0 @ box . cynicism . com>

On Fri, 29 Aug 1997, sar wrote:

sar> At 09:22 AM 8/29/97 +0100, you wrote:
sar> >the problem:
sar> >
sar> >we're running a snmp manager (of course ip-routing set off) on a unix
sar> >box, which should monitor two independent domains. These domains are
sar> >running each their own (internal) dns-server and are protected by
sar> >different firewalls, that hides all local addresses. 
sar> >
sar> >Internet - FW - domain A (internal DNS) --------  manager --------
sar> >domain B (internal DNS) - FW - Internet
sar> >
sar> >the questions:
sar> >
sar> >the manager needs to resolve the local addresses of each domain. Is
sar> >there a way to configure the resolver to handle this without /etc/hosts
sar> >containing all addresses (some hundreds) of one of these domains? 
sar> >
sar> >-- 
sar> >Mit freundlichem Gruß
sar> >
sar> >Martin Meuer
sar> >Attachment Converted: "c:\eudora\attach\smime7.p7s"
sar> >
sar> this may not work with your particular flavor of *nix but you can put each
sar> of the nameservers in the /etc/resolv.conf as
sar> NAMESERVER <ip of dns a>
sar> NAMESERVER <ip of dns b>
sar> it will check both of them to find the host.
sar> 
sar> it is probably possible to setup named on the box an add the ip's of the 2
sar> name servers to the root cache file.. but then anyone doing dig on the box
sar> will get the ips of the 2 name server. 
sar> 

	Hello,

	If the sugestion above don't work, and assuming that the manager
machine is well protected by the 2 firewalls, you can configure it as a
secondary name server of the two domains.

	Regards,

		Leonardo Bentes
		Pangeia Informatica
		http://www.pangeia.com.br



References:
Indexed By Date Previous: Re: Your B2 firewall
From: mcnabb @ argus-systems . com (Paul McNabb)
Next: definitions
From: bob bryant <rbryant @ gte . com>
Indexed By Thread Previous: Re: DNS setup
From: sar <sar @ cynicism . com>
Next: Re: DNS setup
From: Anton J Aylward <anton @ the-wire . com>

Google
 
Search Internet Search www.greatcircle.com