New rc.d/named features for testing: auto-forwarding and wait on boot

Mel Flynn mel.flynn+fbsd.current at mailing.thruhere.net
Tue Mar 31 01:25:25 PDT 2009


Hi Doug,

On Tuesday 31 March 2009 08:17:35 Doug Barton wrote:

> > In addition to enabling auto_forward you can also enable
> > auto_forward_only which changes from the default 'forward first' to
> > (you guessed it) 'forward only'.

> And of course, the patch:
> http://dougbarton.us/Downloads/rcd-named.diff

Snippet:
+				if [ -z "$firstns" ]; then
+					if [ ! "$nsip" = '127.0.0.1' ]; then
+						echo 'nameserver 127.0.0.1'
+						echo "		${nsip};" >> /var/run/auto_forward.conf
+					fi

I think the hardcoded 127.0.0.1 should be configurable especially considering 
prepend-domain-nameservers option for dhclient.conf(5). Now you risk using 
yourself as forwarder if you expose the resolver to the internal network 
(whether it be through dhclient or statically).
Also, maybe the combo of autoforward and dhclient should be guarded against, 
since there's no telling which comes up first and both dhclient and 
/etc/rc.d/named might be writing /etc/resolv.conf at the same time / after 
eachother.

Lastly, 127.0.0.1 and ::1 aren't equal, yet they are the same thing ;)
-- 
Mel


More information about the freebsd-current mailing list