I wrote: > What I ended up doing was to install (on the router) a local resolver running > a slave zone for a couple of our own domains - then as long as the DNS is set > to start before the firewall, the DNS names I used would be available locally.
I also considered creating a params file with a list of name-address definitions and pushing that out to each machine whenever there was a change. As I wasn't running a management system (eg Puppet, Chef ?) to automate the pushing out of the file and restarting of Shorewall, it was going to take more work than just running a local zone on key devices. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
