Re: [Dnsmasq-discuss] question about limits of dnsmasg

[Peter Willis]

Yes, it will work, almost exactly as you descibe actually (though there are 
better ways of going about it using a file separate from /etc/hosts). Read 
the /etc/dnsmasq.conf file for examples and further detail. (There is even 
an example that changes all domains matching doubleclick.net to 127.0.0.1, 
which when combined with apache and virtual hosting makes for a very simple 
yet effective ad blocker) 

Eric S. Johansson writes: 

I'm very impressed by the capabilities of dnsmasg but I try to find out if 
what I want to can be done without going to full bind. 

the network here is a classic red/green/orange security zone. 

On the green network is my wife's Linux machine and my Windows machine 
(when you're handicapped and need real speech recognition i.e. 
NaturallySpeaking, you have no choices). 

My wife's Linux machine is also where I do a fair amount of my work and 
use for backup of other machines on the raid 1 array. 

In the orange zone is a bunch of machines but is going to be reduced to 2. 
 A Digital Alpha running debian and used for amateur radio tropospheric 
propagation predictions, and a duck soup machine running several virtual 
machines (xen based) for publicly exposed services and e-mail (although 
that may be moved to my wife's machine for a variety of reasons) 

the collection of 4 virtual machines is hosting a variety of domains 
(approximately 10) at last count. 

in the current incarnation, I have multiple zones internally overlaying 
the name spaces of the virtual domains so that I can use the same names 
internally as well as externally plus some additional internal only names. 

In reality, I don't really need zones.  All I need is to be able to 
associate any string with an IP address and then through convention, use 
the string that external domain names would use to access the same 
machines. 

in theory, if I was to put in my host file: 

1.2.3.4 abc.com
1.2.3.5 xyz.com 

and be able to refer to those domain names and get back the right internal 
address, I would be relatively happy. 

Yes, I am aware of the problem of overlaying an external domain within 
internal representation of the same name space but it is a price I'm 
willing to pay since I can always use dig with an external name server or 
run a separate internal name server that is uncontaminated. 

so, will it work or do I need another cup of coffee this morning? 

--- eric 

--
http://www.wired.com/wired/archive/13.03/view.html?pg=5 

The result of the duopoly that currently defines "competition" is that
prices and service suck. We're the world's leader in Internet
technology - except that we're not. 

_______________________________________________
Dnsmasq-discuss mailing list
Dnsmasq-discuss@lists.thekelleys.org.uk
http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss