Hi folks, Question: Can I use the same dnsmasq as an authoritative DNServer as well as a forwarder for external queries? No DHCP, but static tables in /etc/hosts and /etc/ethers. dnsmasq is version 2.72
Here is my configuration: domain-needed bogus-priv no-resolv server=8.8.4.4 all-servers auth-server=hosting.example.com,10.10.111.11 auth-zone=hosting.example.com,10.10.111.0/24 auth-sec-servers=172.19.88.123,172.19.88.124 domain=hosting.example.com,10.10.111.0/24,local expand-hosts read-ethers cache-size=1024 log-queries log-dhcp log-facility=/var/log/dnsmasq.log hosting.example.com can use itself to resolve queries for foo.hosting.example.com and for "external" hostnames. Other hosts in 10.10.111.0/24 can use this server to resolve foo.hosting.example.com as well, but if they query for external hostnames, then they get "WARNING: recursion requested but not available". Sample: # dig @10.10.111.11 www.heise.de A ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @10.10.111.11 www.heise.de A ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49662 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;www.heise.de. IN A ;; Query time: 0 msec ;; SERVER: 10.10.111.11#53(10.10.111.11) ;; WHEN: Thu Mar 19 15:51:35 2015 ;; MSG SIZE rcvd: 30 I spent (way too) many hours to figure out why dnsmasq doesn't act as a forwarder for all hosts in the local subnet in this case. AFAICS the configuration should work, but maybe I missed something. Every helpful comment is highly appreciated. Harri -- aixigo AG, Karl-Friedrich-Strasse 68, 52072 Aachen, Germany phone: +49 241 559709-79, fax: +49 241 559709-99 eMail: [email protected], web: http://www.aixigo.de Amtsgericht Aachen - HRB 8057, Vorstand: Erich Borsch, Christian Friedrich, Tobias Haustein, Vors. des Aufsichtsrates: Prof. Dr. Ruediger von Nitzsch _______________________________________________ Dnsmasq-discuss mailing list [email protected] http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
