Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Aug 2006 14:40:16 -0700
From:      Julian Elischer <julian@elischer.org>
To:        John-Mark Gurney <gurney_j@resnet.uoregon.edu>
Cc:        FreeBSD Net <freebsd-net@FreeBSD.org>, Doug Barton <dougb@FreeBSD.org>
Subject:   Re: possible patch for implementing split DNS
Message-ID:  <44F362C0.6080309@elischer.org>
In-Reply-To: <20060828195339.GF37035@funkthat.com>
References:  <44EF6E18.6090905@elischer.org> <44F3429F.6050204@FreeBSD.org> <44F344FA.1000408@elischer.org> <20060828195339.GF37035@funkthat.com>

index | next in thread | previous in thread | raw e-mail

John-Mark Gurney wrote:

>Julian Elischer wrote this message on Mon, Aug 28, 2006 at 12:33 -0700:
>  
>
>>ALmost all other services (e.g. inetd,natd,sshd, etc.etc.) allow you to 
>>specify a different config file
>>so that you can supply different services to theinside and outside but 
>>it all falls appart
>>if they still are forced to use the same DNS server and can not provide 
>>a differentiated service
>>for that reason.
>>    
>>
>
>Why not put one of the two in side a jail (I think someone else mentioned
>this), or chroot'd environment where it can pick up a different resolv.conf?
>
>  
>

The very mail you quoted says that I can not put it inside a jail.
 a chroot is slightly less problematical except that they do need to 
share filesystems.
To make it fully work I need to have /etc nearly all shared along with a 
lot more but I need
to have different /etc/resolv.conf

so, Why NOT make this tunable from the environment? it does not do it 
for SUID processes
and there are already environment varables that influence name lookup.




home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44F362C0.6080309>