|
Hi Sluggers,
Firstly, appologies for mail
client, I'm currently without a Linux Desktop. I was wondering if anyone knows
how to bind a program to a particular IP for outgoing communications?
Specifically I am setting up Bind as a secondary DNS and it's grabbing zone info
from a master server.. The master is a Win2k box that is set to accept zone
request info from domain only. For each of the 3 domains he's set the ns2 (the
linux box) to be a different ip so that when reverse lookups are set up it will
only show the relevant domain).
I've scoured the web and I've
found doco's on how to run multiple instances of bind and to set each to listen
to a certain ip. This is all great but it doesn't set the src ip of any requests
it makes to be the ip it listens to. So what happens is that although the linux
box has eth0 and 18 aliased ip's on eth0 (ie eth0:0 - eth0:17) whenever it tries
to grab the zone info from ns1 all the win2k box see's is the eth0
ip.
I hope this makes sense as I'm not 100% sure if
this is the most easily understandable explaination.. I guess essentially what
I'm trying to acheive is to spoof the ip address like nmap can do.. I was
wondering if ipchains might have been the answer.. because the ns1 for each
domain has a different ip and I was wondering if there is a rewrite ip header
ability where if dest ip = ns1.domain1 then rewrite src ip to
ns2.domain1.
Is any of this possible or am I asking for
things that shouldn't be? I'd prefer it if there is an ipchains/ tables solution
rather than a multiple instance of bind solution as that way there's just 1
instance of bind running and hence there aren't the performance overheads to
contend with.
Thanks in advance.
Paul
|
- Re: [SLUG] BIND / Network connection Paul Robinson
- Re: [SLUG] BIND / Network connection Jeff Waugh
