• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: DNS settings...
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DNS settings...


  • Subject: Re: DNS settings...
  • From: Allan Nathanson <email@hidden>
  • Date: Mon, 19 Sep 2005 10:29:04 -0400


On Sep 18, 2005, at 9:55 PM, Matthew Bogosian wrote:

Ah, okay. I can see now that I was mistaken. This is the correct configuration. However, it was the behavior of the host command that threw me off:

% host www.domain.dom
Host www.domain.dom not found: 3(NXDOMAIN)

/etc/resolv.conf is unchanged after issuing the scutil commands:

% cat /etc/resolv.conf
domain myisp.net
nameserver <MY_ISP_IP>


I'm assuming the host command uses /etc/resolv.conf (rather than the OS X resolver), which is why it would fail, but applications like Safari would still work....

I took a quick look at the BIND source code and your assumption appears to be correct.




On Sep 18, 2005, at 18:09 , Matthew Bogosian wrote:


After entering these commands, I can see the new resolver entry in the output of 'scutil --dns', but domain.dom *also* gets added to the default resolver:

DNS configuration

resolver #1
  domain : myisp.net
  search domain[0] : domain.dom    <- HUH?!
  search domain[1] : myisp.net
  nameserver[0] : <MY_ISP_IP>
  order   : 200000

resolver #2
  domain : domain.dom
  nameserver[0] : <VPN_DNS_IP>
  order   : 100600

...

What gives? Any help would be very much appreciated (incidentally, I'm running 10.4).

We've attempted to make life a bit better for those VPN configurations which do not become the "primary" service. The question is how to resolve a non-fully qualified domain name. In your example, with the VPN up, should we attempt to resolve "foo" as only "foo.myisp.net" or as "foo.domain.dom" and then "foo.myisp.net"? The feedback we received leaned toward the latter with the reasoning being that the VPN is providing access to "domain.dom" and that the VPN domain should have some preferential treatment.


- Allan

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Re: DNS settings... (From: Matthew Bogosian <email@hidden>)
 >Re: DNS settings... (From: Matthew Bogosian <email@hidden>)

  • Prev by Date: Re: CFSocket Help
  • Next by Date: Re: MoreSCF Location woes and Airport (kSCEntNetAirPort) problems.
  • Previous by thread: Re: DNS settings...
  • Next by thread: Delaying with APC
  • Index(es):
    • Date
    • Thread