Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Sep 2013 15:05:33 -0600
From:      Busarow Dan <dan@buildingonline.com>
To:        Laurent SALIN <salin.laurent@laposte.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: How to ask a DNS resolver listening on a different port than the tcp/udp 53
Message-ID:  <35A6D3B1-EC90-4D28-B1A0-651E4F8326FC@buildingonline.com>
In-Reply-To: <52473AE5.6050002@laposte.net>
References:  <5245CC59.5060204@laposte.net> <524600CF.3040609@fjl.co.uk> <13463C66-C15D-48E0-B926-CA0BF6580CAD@elde.net> <524610BE.4020904@fjl.co.uk> <CAHu1Y70bkt7g%2B95uUA_zUBt6NGbBKQvtcWpEeLM7rB0eFg6y_w@mail.gmail.com> <5246DEB3.7090002@fjl.co.uk> <A86693BE-6DAB-4D40-9848-80A2B81003EF@elde.net> <52470EE1.5060004@laposte.net> <201309281528140924.0128A336@smtp.24cl.home> <52473AE5.6050002@laposte.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sep 28, 2013, at 2:24 PM, Laurent SALIN <salin.laurent@laposte.net> =
wrote:

> Le 28.09.2013 21:28, Mike. a =E9crit :
>> The way I solved this problem on my setup, I assigned another IP
>> address to the network interface via ifconfig alias.
>>=20
>> I put the authoritative namesever on one IP address, and the
>> recursive nameserver on the other IP address.
>>=20
>> They both are still listening on port 53, but on different IP
>> addresses.
>=20
> hi,
> If I could it would be just fine.
> I got only one public IPv4 with each VPS. I've got a IPv6 too but I'm
> not easy with IPv6 yet.
>=20
> The provider (Tilaa) where I rent one of the 2 VPS, the one who may =
need
> 2 IPv4, is a bit short about his range of IPv4 and I guess it's not
> raisonable to ask for a second IPv4 just for my personal use in case =
of
> studying *BSD and networking stuff, I don't have a professional use =
here.

You only need to run one name server.  It is both authoritative and =
recursive by default.  To limit recursion to only your own IP address =
space add the following option in named.conf


options {
  allow-recursion {
    192.168.1.0/24;
    127.0.0.1;
  };
};

Change the address space to suit.  Make sure you include localhost.

And after an rndc reload only your internal network will be able to make =
recursive requests.

Dan



>=20
> Thanks.
>=20
> Laurent SALIN
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to =
"freebsd-questions-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35A6D3B1-EC90-4D28-B1A0-651E4F8326FC>