Package: openresolv Version: 3.5.2-1 Severity: wishlist Dear Maintainer,
I have installed openresolv on the systems I administer, including my laptop, to have it setup a local caching nameserver which forwards DNS queries to appropriate real nameservers. While it works, I found that the current setup of openresolv configures bind to always forward queries, even when they are for zones which are nonroutable as per rfc 1918, e.g. 127.*, 192.168.*, etc.. Now, all these zones are correctly configured by default in debian so that the local bind servers knows to respond to them with no need to forward them. However, openresolv overrides this by setting up bind to ALWAYS forward queries, so I am getting lots of replies (which go into system logs) like e.g. named: client 127.0.0.1#38598: RFC 1918 response from Internet for 127.150.168.192.in-addr.arpa It would be nice to be able to tell openresolv, in some configuration option or file, to add some fields to named-zones.resolvconf so that for some zones queries are NOT forwarded, but instead resolved by the local nameserver. Or, perhaps add some quick howto on how to add some configuration to bind to this effect. Thanks, best regards Giacomo Mulas -- System Information: Debian Release: 7.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'proposed-updates'), (105, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.14.15-oac-core2 (SMP w/8 CPU cores) Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to it_IT.UTF-8) Shell: /bin/sh linked to /bin/dash -- Configuration Files: /etc/resolvconf.conf changed: resolv_conf=/etc/resolv.conf name_servers=127.0.0.1 search_domains="oa-cagliari.inaf.it dsf.unica.it ca.infn.it " named_options=/etc/bind/named.conf.resolvconf named_zones=/etc/bind/named-zones.resolvconf dnsmasq_resolv=/var/run/dnsmasq/resolv.conf pdnsd_conf=/etc/pdnsd.conf unbound_conf=/var/cache/unbound/resolvconf_resolvers.conf -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
