From owner-freebsd-stable@FreeBSD.ORG Thu Jul 17 04:24:59 2008 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4F011106564A for ; Thu, 17 Jul 2008 04:24:59 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.freebsd.org (Postfix) with ESMTP id 1C8F38FC13 for ; Thu, 17 Jul 2008 04:24:58 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id 506BB5C22; Thu, 17 Jul 2008 00:06:36 -0400 (EDT) X-Virus-Scanned: amavisd-new+ClamAV at codefab.com Received: from [10.152.145.230] (72-165-115-225.dia.static.qwest.net [72.165.115.225]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTPSA id 6F6B55C1E; Thu, 17 Jul 2008 00:06:34 -0400 (EDT) Message-Id: <8DFF6DCD-6619-4251-9944-59CED8DF1B19@mac.com> From: Chuck Swiger To: Eugene Grosbein In-Reply-To: <20080717035155.GA81536@svzserv.kemerovo.su> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v928.1) Date: Wed, 16 Jul 2008 21:06:33 -0700 References: <20080716162042.GA27666@svzserv.kemerovo.su> <487E312E.9090307@infracaninophile.co.uk> <20080717035155.GA81536@svzserv.kemerovo.su> X-Mailer: Apple Mail (2.928.1) Cc: stable@freebsd.org Subject: Re: named.conf: query-source address X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2008 04:24:59 -0000 On Jul 16, 2008, at 8:51 PM, Eugene Grosbein wrote: > On Wed, Jul 16, 2008 at 06:34:38PM +0100, Matthew Seaman wrote: >> The 'query-source' options don't have to be specified: the system >> will just choose some appropriate address according to the state of >> the routing table. 'query-source' to set the source /IP/ is really >> only useful in some specific server configurations with several alias >> addresses any of which could be used. That's pretty rare really. > > Isn't this common to have multiple aliases at an interface? > Sometimes only one of them should be used for all DNS traffic. About the only common reason to set up multiple aliases on an interface is when you're doing something like hosting multiple SSL webservers on a single box which actually need to have distinct IPs as a consequence. Other than that, using public IPs for aliases is usually wasteful of IP address space. YMMV... Regards, -- -Chuck