From owner-freebsd-questions@FreeBSD.ORG  Thu Jul 21 18:42:10 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0B9BB16A41F
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Jul 2005 18:42:10 +0000 (GMT)
	(envelope-from kirk@strauser.com)
Received: from kanga.honeypot.net (kanga.honeypot.net [208.162.254.122])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0355043D7C
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Jul 2005 18:41:47 +0000 (GMT)
	(envelope-from kirk@strauser.com)
Received: from localhost (localhost [127.0.0.1])
	by kanga.honeypot.net (Postfix) with ESMTP id C9B7C21C907
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Jul 2005 13:41:46 -0500 (CDT)
Received: from kanga.honeypot.net ([127.0.0.1])
	by localhost (kanga.honeypot.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 79487-13 for <freebsd-questions@freebsd.org>;
	Thu, 21 Jul 2005 13:41:44 -0500 (CDT)
Received: from janus.daycos.com (janus.daycos.com [204.26.70.77])
	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
	(No client certificate requested)
	by kanga.honeypot.net (Postfix) with ESMTP id 2F57321C845
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Jul 2005 13:41:44 -0500 (CDT)
From: Kirk Strauser <kirk@strauser.com>
To: freebsd-questions@freebsd.org
Date: Thu, 21 Jul 2005 13:41:39 -0500
User-Agent: KMail/1.8.1
References: <40356a66050720120219f6dd92@mail.gmail.com>
	<42DF4CAB.4070306@meijome.net>
	<op.st85lcwujjurwa@dyn94.dcjarmichael.com.au>
In-Reply-To: <op.st85lcwujjurwa@dyn94.dcjarmichael.com.au>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart3121371.gMKycAyYu5";
	protocol="application/pgp-signature"; micalg=pgp-sha1
Content-Transfer-Encoding: 7bit
Message-Id: <200507211341.43061.kirk@strauser.com>
X-Virus-Scanned: amavisd-new at honeypot.net
Subject: Re: DNS service with a SQL backend
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jul 2005 18:42:10 -0000

--nextPart3121371.gMKycAyYu5
Content-Type: text/plain;
  charset="iso-8859-15"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Thursday 21 July 2005 02:25, Daniel Marsh wrote:

> The only issue I foresee is having to have slightly different zone names
> that you wish to serve for each IP range.

Not true.  Zone *files*, yes.  Because of the wonderfulness that is NAT, my=
=20
LAN's nameserver gives different answers based on whether the query comes=20
from the LAN or the Internet.  My named.conf looks similar to:

    view "private" {
        match-clients {
            !127.0.0.1;
            !::1;
            localhost;
            "lan";
        };

        zone "honeypot.net" {
            type master;
            file "internal/db.honeypot.net";
        };
    };

    view "public" {
        match-clients { any };

        zone "honeypot.net" {
            type master;
            file "external/db.honeypot.net";
        };
    };

Then, my zone files looks like:

  internal/db.honeypot.net:

    $INCLUDE ../common-stuff
    www  IN  A  10.5.0.32

  external/db.honeypot.net:

    $INCLUDE ../common-stuff
    www  IN  A  12.34.56.78

  common-stuff:

    @ IN SOA ...
    www  IN  A  2001:470:1f01:224:1::2
    and so on

So, the Internet and my LAN see mostly the same data, except for a few=20
records that get answered with different values.
=2D-=20
Kirk Strauser

--nextPart3121371.gMKycAyYu5
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iD8DBQBC3+xn5sRg+Y0CpvERAichAJ9yckILtA0fczFbcsJreLi6+Zy+XQCfR8dG
qd+0jvSPKuiikzT8Mv6Wz6U=
=X6aH
-----END PGP SIGNATURE-----

--nextPart3121371.gMKycAyYu5--