From owner-freebsd-questions@FreeBSD.ORG Thu Apr 8 21:04:46 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D7421065670 for ; Thu, 8 Apr 2010 21:04:46 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout025.mac.com (asmtpout025.mac.com [17.148.16.100]) by mx1.freebsd.org (Postfix) with ESMTP id 878A08FC12 for ; Thu, 8 Apr 2010 21:04:46 +0000 (UTC) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; charset=us-ascii Received: from cswiger1.apple.com ([17.209.4.71]) by asmtp025.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0L0K00DJBT7VZH80@asmtp025.mac.com> for freebsd-questions@freebsd.org; Thu, 08 Apr 2010 14:04:44 -0700 (PDT) X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx engine=5.0.0-0908210000 definitions=main-1004080188 From: Chuck Swiger In-reply-to: <201004082058.o38KwuSI019881@leka.aloha.com> Date: Thu, 08 Apr 2010 14:04:43 -0700 Message-id: <96B86AF8-F505-411B-BF09-FAAAB9D72C97@mac.com> References: <201004082058.o38KwuSI019881@leka.aloha.com> To: Gary Dunn X-Mailer: Apple Mail (2.1078) Cc: freebsd-questions Subject: Re: Does NAT require DNS (named)? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Apr 2010 21:04:46 -0000 On Apr 8, 2010, at 1:57 PM, Gary Dunn wrote: > Continuing the saga of building a wireless access point, what is the best way to provide DNS service to the dowstream network? Run a nameserver? > Seems like all I need is a simple pass-through. For that named seems like overkill. Anyone have an /etc/named/named.conf that does that? named is fine, although I was happier with it's security history in the prior millennium than I am recently. But, if you don't want to run your own nameserver, point them toward nameservers run by your upstream network provider... Regards, -- -Chuck