From owner-freebsd-questions@FreeBSD.ORG Sun Feb 1 12:48:04 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4106E16A4CE for ; Sun, 1 Feb 2004 12:48:04 -0800 (PST) Received: from themango.org (64-151-23-134-dhcp-kc.everestkc.net [64.151.23.134]) by mx1.FreeBSD.org (Postfix) with ESMTP id B2A0343D31 for ; Sun, 1 Feb 2004 12:48:02 -0800 (PST) (envelope-from luke@themango.org) Received: from [10.2.2.13] (ariel.themango.org [10.2.2.13]) by themango.org (Postfix) with ESMTP id 8854E45149; Sun, 1 Feb 2004 14:47:59 -0600 (CST) In-Reply-To: <007a01c3e901$5a4ada80$3268a8c0@edsdell8200> References: <007a01c3e901$5a4ada80$3268a8c0@edsdell8200> Mime-Version: 1.0 (Apple Message framework v612) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Luke Johannsen Date: Sun, 1 Feb 2004 14:48:02 -0600 To: "Edward Carmody" X-Mailer: Apple Mail (2.612) cc: freebsd-questions@freebsd.org Subject: Re: FBSD router/firewall with dhclient & dhcpd X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Feb 2004 20:48:04 -0000 On Feb 1, 2004, at 2:24 PM, Edward Carmody wrote: > Hi, I'm trying to replace my Linksys > router/firewall/nat box with a FreeBSD box...I'm > in the configuring/testing phase before I put it > into production... > > My *potential* problem is that my ISP > (Cablevision) re-addresses their DNS servers > often. My question is: is there a way to > dynamically update the "option > domain-name-servers" values in dhcpd.conf from the > "nameserver" values my ISP-facing, dhclient-using > interface is writing into "resolv.conf"? > > Or, more simply, how can my DHCP server hand out > *known-fresh-and-good* ISP dns server addresses > gathered from the wan-facing dhcp client?? The > linksys box I have now does this auto-magically... > ;-) > I don't know if this is a solution that you want but it works for me. Setup DNSMasq on your firewall machine. http://www.thekelleys.org.uk/dnsmasq/doc.html or from the ports /usr/ports/dns/dnsmasq. Then just point to your internal IP on your firewall as your nameserver. It's quick and painless to setup and get running and seems to work well for small networks.