Re: DNS settings...
Re: DNS settings...
- Subject: Re: DNS settings...
- From: Allan Nathanson <email@hidden>
- Date: Mon, 19 Sep 2005 10:29:04 -0400
On Sep 18, 2005, at 9:55 PM, Matthew Bogosian wrote:
Ah, okay. I can see now that I was mistaken. This is the correct
configuration. However, it was the behavior of the host command
that threw me off:
% host www.domain.dom
Host www.domain.dom not found: 3(NXDOMAIN)
/etc/resolv.conf is unchanged after issuing the scutil commands:
% cat /etc/resolv.conf
domain myisp.net
nameserver <MY_ISP_IP>
I'm assuming the host command uses /etc/resolv.conf (rather than
the OS X resolver), which is why it would fail, but applications
like Safari would still work....
I took a quick look at the BIND source code and your assumption
appears to be correct.
On Sep 18, 2005, at 18:09 , Matthew Bogosian wrote:
After entering these commands, I can see the new resolver entry in
the output of 'scutil --dns', but domain.dom *also* gets added to
the default resolver:
DNS configuration
resolver #1
domain : myisp.net
search domain[0] : domain.dom <- HUH?!
search domain[1] : myisp.net
nameserver[0] : <MY_ISP_IP>
order : 200000
resolver #2
domain : domain.dom
nameserver[0] : <VPN_DNS_IP>
order : 100600
...
What gives? Any help would be very much appreciated (incidentally,
I'm running 10.4).
We've attempted to make life a bit better for those VPN
configurations which do not become the "primary" service. The
question is how to resolve a non-fully qualified domain name. In
your example, with the VPN up, should we attempt to resolve "foo" as
only "foo.myisp.net" or as "foo.domain.dom" and then
"foo.myisp.net"? The feedback we received leaned toward the latter
with the reasoning being that the VPN is providing access to
"domain.dom" and that the VPN domain should have some preferential
treatment.
- Allan
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden