From: Erich T. <eri...@th...> - 2009-08-03 13:08:16
|
Eric as JJK pointed out this is a bit off topic here, but lets try Eric S. Johansson wrote: In > a nutshell, I want DNS queries to go to a name server across the VPN only if the > query can only be served by that name server. How do you think a resolver should decide that? By consulting an internal list.... bad idea. What else. So you will have to tell your resolver where to go with a query, unfortunately, or rather fortunately, I think, resolvers are quite stupid. They need a server. Servers on the other hand can be taught to do such tasks. If you are connected to a net across a VPN it is a bit like family membership, unless you are a member you do not know what happens inside the family. So it makes sense that your name resolution is part ot the internal view as soon as you have direct access to that internal net. There is nothing wrong using an internal nema server, what can be wrong is that the internal name server would not service everything you want, but that is not a technical problem. Maybe If you detail a bit more, someone may come up with an idea. cheers Erich |