*BSD News Article 53273


Return to BSD News archive

#! rnews 2165 bsd
Newsgroups: comp.unix.bsd.freebsd.misc
Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!newshost.telstra.net!kettle.magna.com.au!news.cs.su.oz.au!harbinger.cc.monash.edu.au!yarrina.connect.com.au!classic.iinet.com.au!swing.iinet.net.au!news.uoregon.edu!usenet.eel.ufl.edu!news.mathworks.com!news.kei.com!ddsw1!news.mcs.net!chilton!chris
From: chris@vindaloo.com (Christopher Sean Hilton)
Subject: Re: DNS problems?
Organization: Vindaloo communications
Message-ID: <1995Oct21.035022.298@vindaloo.com>
References: <1995Oct10.001314.18062@vindaloo.com>
Date: Sat, 21 Oct 95 03:50:22 GMT
Lines: 48

In article <1995Oct10.001314.18062@vindaloo.com>,
Christopher Sean Hilton <chris@vindaloo.com> wrote:


If anyone's interested I solved half of the problem:

>Hi:
>
>I'm having problems with my dns setup on a FreeBSD network. I have a
>one registered address (X.X.X.X) for the internet so I pipe all of my
>contact with the net through a FreeBSD machine serving as a
>"firewall"/proxy server. For the rest of my addresses I'm using the
>class C specified in RFC 1597 for non-connected networks. On the proxy
>server I run iijppp in auto mode so whenever a packet needs to be
>routed to the real net it goes through my firewall. This all works
>great. The problem is that when I go to rlogin to the proxy server it
>insists sending a DNS packet to the net. This means dialing the phone
>even though the host I'm trying to contact is on my side of the

The rlogin problem was with /etc/hosts.equiv. The shipped version
contains two lines:

     #localhost
     #my_vert_good_friend.domain

The packets going out were DNS lookups for these two machines (I put
up a sniffer on my network and saw these two DNS packets go out, #'s
and all. I changed this file to read:

     localhost

Is this safe?


>"firewall". It also has to dial when it sends the nightly system
>status mail to me at 0200. Here's some more details:

This looks like a matter of telling sendmail not to use
dns... feature(nodns) should do the trick.




-- 
--
Note:
     I'll be in the process of changing vindaloo.com's mail handler
     during the month of october. During that time some mail may be