On Sep 22, 2017, at 11:10 PM, Michael Knill <michael.kn...@ipcsolutions.com.au> 
wrote:

> Thanks Lonnie.
> Interesting - https://en.wikipedia.org/wiki/.local
> 
> I think I will change them all to priv.<my domain> like you have.

That has served me well for years.

Though, if you were going to change your local domain names, if your ever 
wanted to generate ACME (Let's Encrypt) certificates locally (lots of reasons 
to do so) you may want to consider using global DNS names.

ACME certs require global DNS domains that you have control over, and DNS 
providers the acme.sh script supports.

Also you could still use priv.ipcsolutions.com.au domain on boxes and manually 
add a DNS host entry for pbx-123.deploy.ipcsolutions.com.au (just an example) 
where you have a global DNS entry for pbx-123.deploy.ipcsolutions.com.au you 
control for ACME certificates.

Some might think it would be less confusing if the ACME cert DNS name was the 
same as the box host / domain configuration.

Regardless you would be using split-horizon DNS, ie. the local devices (Local 
Domain checked) would see a private address for 
pbx-123.deploy.ipcsolutions.com.au, and you may not ever use the public 
pbx-123.deploy.ipcsolutions.com.au except for ACME certificate renewals.

Something to think about.

Lonnie

ACME (Let's Encrypt) Certificates
https://doc.astlinux-project.org/userdoc:tt_acme_certificates




> -----Original Message-----
> From: Lonnie Abelbeck <li...@lonnie.abelbeck.com>
> Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net>
> Date: Saturday, 23 September 2017 at 1:44 pm
> To: AstLinux List <astlinux-users@lists.sourceforge.net>
> Subject: Re: [Astlinux-users] Delay after Asterisk Dial when no DNS
> 
> Holy wayback machine ... though what you quoted seems to be still valid.
> 
> The "Local Domain" checkbox determines a dnsmasq configuration for whether 
> the listed Domain is part of an upstream DNS zone or to create an independent 
> local DNS zone.
> 
> It would appear a Domain of "ipcsolutions.local" would have Local Domain 
> checked (the default). with a thought:
> 
> 1) Years ago using .local caused issues in some cases with clients using 
> mDNS, Zeroconf, not sure if that is problem anymore, I'm suspecting newer OS 
> client's are OK.
> 
> Lonnie
> 
> 
> On Sep 22, 2017, at 8:21 PM, Michael Knill 
> <michael.kn...@ipcsolutions.com.au> wrote:
> 
>> Actually sorry if Local Domain is checked which is now going to be the case 
>> for virtually all my systems, then 3) is irrelevant anyway.
>> 
>> Regards
>> Michael Knill
>> 
>> -----Original Message-----
>> From: Michael Knill <michael.kn...@ipcsolutions.com.au>
>> Reply-To: AstLinux List <astlinux-users@lists.sourceforge.net>
>> Date: Saturday, 23 September 2017 at 11:18 am
>> To: AstLinux List <astlinux-users@lists.sourceforge.net>
>> Subject: Re: [Astlinux-users] Delay after Asterisk Dial when no DNS
>> 
>> Ok I have looked back through the Astlinux archives and found one of 
>> Lonnie's old posts.
>> ------------------
>> ====
>> Single Interface (only External Interface: defined) configuration:
>> 1) In the Network tab, make the Hostname: and Domain: match that of the 
>> upstream DNS server.
>> 2) Uncheck the "Local Domain" box.
>> 3) Make sure no IPv4 (or IPv6/nn) addresses are defined in any of the 
>> "Internal Interfaces:" section fields.
>> ====
>> Now, in your case, you have internal interfaces/networks.  As a rule the 
>> first defined internal interface (usually 1st LAN) will automatically have a 
>> /etc/hosts entry:
>> --
>> INTIP HOSTNAME.DOMAIN HOSTNAME
>> --
>> Note: Regardless if "Local Domain" is checked or unchecked, HOSTNAME will 
>> resolve to INTIP. The file /etc/hosts always has priority.
>> 
>> So, if you have internal interfaces/networks the DOMAIN should normally be 
>> unique and "Local Domain" should be checked.  For example DOMAIN could be 
>> "local' or I personally use "priv.abelbeck.com" as my AstLinux DOMAIN which 
>> does not occur anywhere in the public DNS.
>> 
>> Define your DNS hosts for your local devices by using Network tab -> DNS 
>> Forwarder & DHCP Server { Configure DNS Hosts }
>> These values will be automatically added to the /etc/hosts file for DNS, 
>> "Restart DNS" to apply the changes.
>> 
>> Note the DHCP server will pass out DOMAIN so all local devices will have the 
>> scope of the *unique* local domain.
>> ---------------------
>> 
>> I have a couple of questions:
>> 1) I don't quite understand '1) In the Network tab, make the Hostname: and 
>> Domain: match that of the upstream DNS server'. Could you please explain 
>> sorry?
>> 2) Im assuming that basically all my systems (with an internal interface) 
>> should be ipcsolutions.local with 'Local Domain' checked?
>> 3) I realise that the DNS requests below are for IPv6. Can I turn this off?
>> 
>> Regards
>> Michael Knill


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to