j d wrote:
> 
> Okay, this might be a total newb question, but I've been looking around for a tip 
> and can't seem to find it.
> 
> I've got a Bering V1.2 uClibc-0.9.15 box up and running, pretty much as a defualt 
> firewall.  Connectivity is good, now I'm just trying to make sure it's actually 
> WORKING as a firewall, which is a different post altogether.  My question concerns 
> dnscache and the "correct" way to resolve nameservers on the internal network.
> 
> I'm running dnscache to refer to my ISP's pri/sec upstream nameservers with 
> FORWARDONLY set, of course.  I'm not running BIND or tinyDNS on the local net, as I 
> simply haven't figured out how yet.  ANYway...those 2 nameservers I've put into the 
> dnscache config (via the lrcfg menu) show up in etc/resolv.conf file - along with 
> another address in the same range, which I'm assuming for the moment is all right.  
> My question is this: if the file /etc/dnscache/env/DNS1 contains the identities of 
> the nameservers that I entered, what the heck are all the address in DNS0 doing?  
> this file reads:
> 
> *****************
> # cat /etc/dnscache/env/DNS0 |more
> 198.41.0.4
> 128.9.0.107
> 192.33.4.12
> 128.8.10.90
> 192.203.230.10
> 192.5.5.241
> 192.112.36.4
> 128.63.2.53
> 192.36.148.17
> 198.41.0.10
> 193.0.14.129
> 198.32.64.12
> 202.12.27.33
> *****************
> 
> ...I can genuinely say I haven't put ANY of those in there.  Can anyone suggest 
> what's going on?  If I've failed to provide enough info for this particular 
> question, please berate me.  Thanks for your help.
> 
> -joe

They are root name servers, even your ISP is dependent on them. There's
lots of documentation at D. J. Bernstein's site:

http://cr.yp.to/djbdns/dnscache.html

Look under "Resolution and caching policies" and it will answer your
question. And how does DNS work, in a simplified manner:

http://cr.yp.to/djbdns/intro-dns.html 
-- 
Patrick Benson
Stockholm, Sweden


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to