Re: New rc.d/named features for testing: auto-forwarding and wait on boot

From: Mel Flynn <mel.flynn+fbsd.current_at_mailing.thruhere.net>
Date: Tue, 31 Mar 2009 10:25:22 +0200
Hi Doug,

On Tuesday 31 March 2009 08:17:35 Doug Barton wrote:

> > In addition to enabling auto_forward you can also enable
> > auto_forward_only which changes from the default 'forward first' to
> > (you guessed it) 'forward only'.

> And of course, the patch:
> http://dougbarton.us/Downloads/rcd-named.diff

Snippet:
+				if [ -z "$firstns" ]; then
+					if [ ! "$nsip" = '127.0.0.1' ]; then
+						echo 'nameserver 127.0.0.1'
+						echo "		${nsip};" >> /var/run/auto_forward.conf
+					fi

I think the hardcoded 127.0.0.1 should be configurable especially considering 
prepend-domain-nameservers option for dhclient.conf(5). Now you risk using 
yourself as forwarder if you expose the resolver to the internal network 
(whether it be through dhclient or statically).
Also, maybe the combo of autoforward and dhclient should be guarded against, 
since there's no telling which comes up first and both dhclient and 
/etc/rc.d/named might be writing /etc/resolv.conf at the same time / after 
eachother.

Lastly, 127.0.0.1 and ::1 aren't equal, yet they are the same thing ;)
-- 
Mel
Received on Tue Mar 31 2009 - 06:25:25 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:45 UTC