Re: Adding DNS ALG support to Bind?

2015-11-06 Thread Bill
Thanks for the suggestion. My intention for now is to trial on a laptop as that give me the maximum flexibility for testing. /bill On Thursday 05 November 2015 17:44, Mark Andrews wrote: > In message <201511051124.03206.boobe...@rogers.com>, Bill writes: > > Yes, to do a full implementation

Re: Adding DNS ALG support to Bind?

2015-11-06 Thread Jan-Piet Mens
Mark, > may want to add a "_dns-update._udp.example.net SRV" record pointing > to the nameservers as someone convinced the router vendor(s) that > this is how you do it Is this a standard? Other than [1], which insinuates it's an Apple-only thing, the Goog turns up only 55 hits for

Re: Adding DNS ALG support to Bind?

2015-11-06 Thread Mark Andrews
In message <20151106120047.ga69...@tiggr.ww.mens.de>, Jan-Piet Mens writes: > Mark, > > > may want to add a "_dns-update._udp.example.net SRV" record pointing > > to the nameservers as someone convinced the router vendor(s) that > > this is how you do it > > Is this a standard? Other than [1],

Re: Adding DNS ALG support to Bind?

2015-11-05 Thread Bill
Yes, to do a full implementation usable in an enterprise you are correct, but what I am looking for is a small demo with only 10 machines or so. I believe your comment about IPv5 is correct too, but I am limited for this trial. /bill On Wednesday 04 November 2015 15:30, Mark Andrews wrote: >

Re: Adding DNS ALG support to Bind?

2015-11-05 Thread Mark Andrews
In message <201511051124.03206.boobe...@rogers.com>, Bill writes: > Yes, to do a full implementation usable in an enterprise you are correct, but > > what I am looking for is a small demo with only 10 machines or so. I believe > > your comment about IPv5 is correct too, but I am limited for

Re: Adding DNS ALG support to Bind?

2015-11-05 Thread Mark Andrews
In message <563c3477.6070...@tnetconsulting.net>, Grant Taylor writes: > On 11/05/2015 03:44 PM, Mark Andrews wrote: > > You may want to add a "_dns-update._udp.example.net SRV" record > > pointing to the nameservers as someone convinced the router vendor(s) > > that this is how you do it rather

Re: Adding DNS ALG support to Bind?

2015-11-05 Thread Grant Taylor
On 11/05/2015 03:44 PM, Mark Andrews wrote: > You may want to add a "_dns-update._udp.example.net SRV" record > pointing to the nameservers as someone convinced the router vendor(s) > that this is how you do it rather than that being a override to the > default of just sending to the nameservers

Re: Adding DNS ALG support to Bind?

2015-11-05 Thread Grant Taylor
On 11/05/2015 10:13 PM, Mark Andrews wrote: > The UPDATE standard say ANY of the nameservers but to prefer the > server which matches the MNAME. I have yet to find a DNS server that will support updates to a slave server out of the box. Bind slave servers can easily be configured forward Dynamic

Re: Adding DNS ALG support to Bind?

2015-11-04 Thread Mark Andrews
If you want this sort of behaviour you are going to have to pay someone someone lots of money to add this sort of functionality to a nameserver and then pay them more money to maintain it. This sort of thing does not exist in normal nameservers. Nameservers don't normally do other things on DNS

Re: Adding DNS ALG support to Bind?

2015-11-04 Thread Grant Taylor
On 11/04/2015 08:45 AM, Bill wrote: > You are correct, but in the use case I am looking at there is no Internet > connection. I think "other network(s)" can substitute "Internet" in this context. > What I am trying to do is to be able to connect to s specific device, say a > 'supervisor' by

Re: Adding DNS ALG support to Bind?

2015-11-04 Thread Bill
See my last posting on what I am trying to achieve, I think in the interest of brevity I may have overly simplified my goal. What I want is for the DNS query to automatically configure the NAT to permit the outside connection. In other words it should, after the DNS query, look as if the

Re: Adding DNS ALG support to Bind?

2015-11-04 Thread Bill
You are correct, but in the use case I am looking at there is no Internet connection. There are a small number of mobile devices (5-15) behind a NAT gateway with DNS. The gateway provides service to other small networks, but there is nothing else connected, it is an isolated system. What I

Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Bill
I was thinking of doing the DNS and the NAT on the same device, then (I assume) the DNS could use connection tracking hooks to add 'expectations' to the NAT. Anyhow, that was what I was hoping, but I've not been able to find out much about anyone having done such a thing, so I might be

Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2015-10-30 at 12:38 -0400, Bill wrote: > What I would like to do to have the ability to query a DNS server > located behind a NAT, and have it return the IP of the NAT, and setup > connection tracking in the NAT to pass traffic thru to the

Re: Adding DNS ALG support to Bind?

2015-11-02 Thread Dave Warren
On 2015-11-02 15:03, Carl Byington wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 2015-10-30 at 12:38 -0400, Bill wrote: >What I would like to do to have the ability to query a DNS server >located behind a NAT, and have it return the IP of the NAT, and setup >connection tracking

Re: Adding DNS ALG support to Bind?

2015-11-01 Thread Reindl Harald
the DNS-ALG can't be handeled on the nameserver itself, it does not know anything about the NAT, the device doing the NAT knows hence the implementation is typically on the edge router Am 30.10.2015 um 17:38 schrieb Bill: Thanks for your remarks. What I am actually looking at is research in

Re: Adding DNS ALG support to Bind?

2015-10-30 Thread Bill
Thanks for your remarks. What I am actually looking at is research in mobile networks where I'd like devices that may or may not be connected to be accessible by name. The devices might have different IP addresses when they connect and I don't want any connection to them to be able to keep an

Re: Adding DNS ALG support to Bind?

2015-10-30 Thread Bill
Yes, I am also looking a tools to update DNS when IP address changes. /bill On Saturday 24 October 2015 17:35, Mark Andrews wrote: > Get yourself IPv6 and forget about the NAT. Complain to your ISP > if they don't supply IPv6. They should be able to as they have had > two decades to prepare

Re: Adding DNS ALG support to Bind?

2015-10-24 Thread Reindl Harald
you *really* do not want that have been punished more than one time by cisco routers having that crap enabled and breaking DNS in various ways including mangle zone transfers and set the TTL of every CNAME to 0 instead leave it untouched or just break zone transfers silently at all setup

Re: Adding DNS ALG support to Bind?

2015-10-24 Thread Mark Andrews
Get yourself IPv6 and forget about the NAT. Complain to your ISP if they don't supply IPv6. They should be able to as they have had two decades to prepare for the fact the IPv4 addresses have run out. That way you don't have to worry about different internal and external addresses. Even

Adding DNS ALG support to Bind?

2015-10-24 Thread Bill
I was wondering if anyone has looked at or is is the process of adding DNS ALG support, or something similar, to bind? https://tools.ietf.org/html/rfc2694 What I would like to do to have the ability to query a DNS server located behind a NAT, and have it return the IP of the NAT, and setup