On Tue, 20 May 1997, Benjamin T. White wrote: > **I can not do domain name resolution with my new setup** The ip > masquerading seems to work with most network traffic. Packets sent by > IP number are forwarded appropriately. I can telnet and use my web > browser on my macs if I use IP numbers. DNS resolution works great on > the linux box, and I have triple checked the nameserver addresses on > the macs. When I do a name lookup on the mac I can see the modem SD > light periodicly lighting up, so I assume that DNS queries are being > sent, but now replys. I can do a name lookup on the linux system > without difficulty. The nameservers on both machines are configured > identically. > > The kicker: booting with my old slackware setup fixes this problem, > without changing anything on the macs.
DNS is one of the limitations of masquerading. It doesn't work. The solution is to install bind on your linux machine (make it use your ISP as a forwarder). It's actually pretty easy with debian - the install script asks a few simple questions and configures it for you. For just a forwarding name server you wont need to ever do any more configuration of bind. Most Linux documentation advises against running bind, saying that it's way too difficult to configure. Nothing could be further from the truth. It was true that a few years ago (when much of the Linux net docco was first being written) that bind was quite unstable, but it's never been terribly difficult to get running. Nowadays, it's very stable and, with the debian package, is probably one of the easiest things to get working....it only takes a few minutes at most. IMO, the benefits of having a local caching name server far outweigh the "difficulty" of installing it. once that's done, configure the Macs to use the Linux machine. BTW, if you're using diald you'll probably want to configure it so that it doesn't bring up the link every time you want to resolve a name. But you'll want to do that whether you're running bind or not. craig -- craig sanders networking consultant Available for casual or contract temporary autonomous zone system administration tasks. -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .