From owner-freebsd-hackers Tue Jan 7 16:33:26 2003 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 69B7737B401; Tue, 7 Jan 2003 16:33:24 -0800 (PST) Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id 95ED143EA9; Tue, 7 Jan 2003 16:33:21 -0800 (PST) (envelope-from pmc@citylink.dinoex.sub.org) Received: from net2.dinoex.sub.org (uucp@net2.dinoex.de [212.184.201.182]) by net2.dinoex.sub.org (8.12.6/8.12.6) with ESMTP id h080X13G028897; Wed, 8 Jan 2003 01:33:02 +0100 (CET) (envelope-from pmc@citylink.dinoex.sub.org) X-Authentication-Warning: net2.dinoex.sub.org: Host uucp@net2.dinoex.de [212.184.201.182] claimed to be net2.dinoex.sub.org Received: from citylink.dinoex.sub.org (uucp@localhost) by net2.dinoex.sub.org (8.12.6/8.12.6/Submit) with UUCP id h080X0m5028896; Wed, 8 Jan 2003 01:33:00 +0100 (CET) (envelope-from pmc@citylink.dinoex.sub.org) Received: from citylink.dinoex.sub.de by citylink.dinoex.sub.org (8.8.5/PMuch-B3b) with ESMTP id AAA07725; Wed, 8 Jan 2003 00:28:05 +0100 (CET) Received: from gate.oper.dinoex.org (localhost [127.0.0.1]) by citylink.dinoex.sub.de (8.12.6/8.12.6) with ESMTP id h07NSKpQ000345; Wed, 8 Jan 2003 00:28:21 +0100 (CET) (envelope-from pmc@disp.oper.dinoex.org) Received: from disp.oper.dinoex.org (disp-e [192.168.98.5]) by gate.oper.dinoex.org (8.12.6/8.12.6) with ESMTP id h07NR3GI000318; Wed, 8 Jan 2003 00:27:04 +0100 (CET) (envelope-from pmc@disp.oper.dinoex.org) Received: (from pmc@localhost) by disp.oper.dinoex.org (8.11.6/8.11.6) id h07N9U101047; Wed, 8 Jan 2003 00:09:30 +0100 (CET) (envelope-from pmc) Date: Wed, 8 Jan 2003 00:09:30 +0100 From: Peter Much To: Terry Lambert Cc: Peter Much , Gregory Neil Shapiro , hackers@FreeBSD.ORG Subject: Re: sendmail: how to get the named of FreeBSD4.7 standards compliant? Message-ID: <20030108000930.A512@disp.oper.dinoex.org> References: <20030101181330.C8233@disp.oper.dinoex.org> <3E134659.78028611@mindspring.com> <20030106173652.A495@disp.oper.dinoex.org> <3E1A1336.9F535670@mindspring.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3E1A1336.9F535670@mindspring.com>; from tlambert2@mindspring.com on Mon, Jan 06, 2003 at 03:37:26PM -0800 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jan 06, 2003 at 03:37:26PM -0800, Terry Lambert wrote: ! > And now I do not think that a "split horizon" configuration could ! > solve my problem at all. Because if it could tell me that my ! > unqualified hostname does not exist (without querying the outside), ! > then it would also tell me that FreeBSD.org does not exist... ! ! That's not entirely true. ! ! The normal way to handle this is to define a domain for your ! internal machines, and then make the DNS server authoritative ! for it. The domain most people use for this is "link.local" ! or ".local", or "example.com". Done this. It is ".oper.dinoex.org" - I think this should do. ! With your local DNS server being authoritative for that domain ! (having an SOA record for the domain name), then it can tell ! when hosts do or don't exist there. Done this. So, if I lookup "schnarz.oper.dinoex.org", then I get "Non-existent host/domain". ! So if I look up an unqualified "froboz", it's assumed to be in ! the local domain because of the DNS suffix every machine is using, ! and every machine is using it, either because you told it to, or ! because that's what the DHCP server told it to use, when it handed ! each machine it's IP address. Exactly. And when this is not found, then the resolver will inplicitly issue another query for the unqualified name. And it is even worse with sendmail, because sendmail does quite interesting things there - like switching off RES_DEFNAMES - so this one will definitely not add the local domain. regards, Peter To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message