LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices



Reply
 
Search this Thread
Old 10-05-2006, 04:12 PM   #1
number22
Member
 
Registered: Sep 2006
Location: Earth
Distribution: Slackware 14.1 Slackware64-current multilib
Posts: 208
Blog Entries: 2

Rep: Reputation: Disabled
Lightbulb DNS and Router


DNS and router should not mixed together.

I had this problem with my dns installed on an router which will automatically answer the arp who-has request, and pop open an connection out bound to my ISP primary dns connection. I can't block it anyway. Such as allow-query{ localnet;} and iptables block all inbound connection at port 53 without source address of a localnet; etc..

Therefore, I have turned off the dns server on my router, and changed resolv.conf on the router with nameserver 127.0.0.1 point back to itself. And after installing/switching this dns server to another computer which is behind the router/firewall. Everything works great.

Lesson learned.
Any thought?

Last edited by number22; 10-05-2006 at 04:17 PM.
 
Old 10-05-2006, 04:37 PM   #2
Old_Fogie
Senior Member
 
Registered: Mar 2006
Distribution: SLACKWARE 4TW! =D
Posts: 1,515

Rep: Reputation: 62
in an ideal world a physical pc that is a dns server should also act as a gateway and firewall & should really be 'network bridged' to the the dsl or cable modem, and not pull an ip address from a store bought router and the router can now sit on a shelf unused. the network bridge basically allows the pc and your modem to work as one and will greatly reduce latency. also that same dns/gateway/firewall pc should not host any servers to the lan or the internet other than dns. even better would be to have the dns on a different box too.
mutliple router's in a network can be chaotic as they get into using rip protocols and if not done correctly can cause issue's such as router's fighting amongst themselve's, packetloss, bad lag, dropped connections. kind of like what happens when you have mulitple switches on a lan.

it can and is commonly done or else we would have no internet, but you get my drift it needs special attention.
 
Old 10-05-2006, 05:06 PM   #3
number22
Member
 
Registered: Sep 2006
Location: Earth
Distribution: Slackware 14.1 Slackware64-current multilib
Posts: 208
Blog Entries: 2

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by Old_Fogie
in an ideal world a physical pc that is a dns server should also act as a gateway and firewall & should really be 'network bridged' to the the dsl or cable modem, and not pull an ip address ...........also that same dns/gateway/firewall pc should not host any servers to the lan or the internet other than dns. even better would be to have the dns on a different box too.
thanks for your reply, I noticed my up link is a bridged networks too, when i looked at those arp request which came from many different net and subnets; once, some of these requests ( who-has) meet my subnet, my dns would pop up connctions, when dns was on this router. This really bothered me, therefore I had moved my dns back to behind my firewall/router.

I had never thought about virtual bridged my up link with localnet too, it is great idea, I will try it out.

Last edited by number22; 10-05-2006 at 05:15 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linksys router and DNS issues Neruocomp General 5 05-10-2005 11:14 AM
Need advice / suggestions on DNS behind a router Seventh Linux - Networking 3 01-22-2005 01:04 AM
DNS proxy on router: useful? Kropotkin Linux - Networking 1 11-10-2004 11:35 AM
DNS Problems with Router schurt Linux - Networking 1 07-14-2004 08:28 PM
question with DNS and router yuhope Linux - Networking 5 03-01-2004 01:46 AM


All times are GMT -5. The time now is 07:27 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration