Thanks. After posting I realized a /29 would be much cleaner as well. It
also helps with my backup situation as well. As only the /24 is BGPd
As for DNS. I'm open to any program on any platform as long as it has a GUI.
The project managers get/have to assign their own DNS names as new clients
come in. We're currently using SimpleDNS on Windows, but I'd switch to
anything if it handled the split horizon DNS. Mac, Linux, Windows..
For those unfamiliar, split horizon DNS is one term for handling DNS
differently for internal and external users. Users on the internet might get
www.fwiz.com resolving to 220.127.116.11 but once we get all the 1:1 NAT
done, we need internal users have www.fwiz.com resolve to 10.0.1.144. It can
be done with 2 DNS servers and duplicate sets of records, but we add and
change records so often I'm really hoping we can find a solution that can
resolve internal and external requests differently depending on the source
IP. Does that explanation sound correct to you Chris?
From: Chris Buechler [mailto:cbuechler at gmail dot com]
Sent: Friday, June 30, 2006 11:57 AM
Cc: m0n0wall at lists dot m0n0 dot ch
Subject: Re: [m0n0wall] Help with layout....
On 6/30/06, Scott Karch <scott dot k at facilitywiz dot com> wrote:
> Man, that' what I was afraid of. I'll try and get 4 /30s to be safe. You
> never know what you might need on the outside of the firewall.
You don't need four /30's. If you think you may need to add devices
outside the firewall in the future, get a /29. That leaves you with 6
total usable IP's, 4 extras. There's no reason to burn all those
small subnets in this situation when a single /29 would serve you
equally well and actually better since it's cleaner.
> Anyone know of the easiest way to do a ( I think this is the right term )
> split horizon DNS without 2 different servers?
What DNS server software?
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch