site_archiver@lists.apple.com Delivered-To: macnetworkprog@lists.apple.com On Sep 18, 2005, at 9:55 PM, Matthew Bogosian wrote: % host www.domain.dom Host www.domain.dom not found: 3(NXDOMAIN) /etc/resolv.conf is unchanged after issuing the scutil commands: % cat /etc/resolv.conf domain myisp.net nameserver <MY_ISP_IP> On Sep 18, 2005, at 18:09 , Matthew Bogosian wrote: DNS configuration resolver #1 domain : myisp.net search domain[0] : domain.dom <- HUH?! search domain[1] : myisp.net nameserver[0] : <MY_ISP_IP> order : 200000 resolver #2 domain : domain.dom nameserver[0] : <VPN_DNS_IP> order : 100600 - Allan _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40lists.... Ah, okay. I can see now that I was mistaken. This is the correct configuration. However, it was the behavior of the host command that threw me off: I'm assuming the host command uses /etc/resolv.conf (rather than the OS X resolver), which is why it would fail, but applications like Safari would still work.... I took a quick look at the BIND source code and your assumption appears to be correct. After entering these commands, I can see the new resolver entry in the output of 'scutil --dns', but domain.dom *also* gets added to the default resolver: ... What gives? Any help would be very much appreciated (incidentally, I'm running 10.4). We've attempted to make life a bit better for those VPN configurations which do not become the "primary" service. The question is how to resolve a non-fully qualified domain name. In your example, with the VPN up, should we attempt to resolve "foo" as only "foo.myisp.net" or as "foo.domain.dom" and then "foo.myisp.net"? The feedback we received leaned toward the latter with the reasoning being that the VPN is providing access to "domain.dom" and that the VPN domain should have some preferential treatment. This email sent to site_archiver@lists.apple.com