<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I run a domain, which I’ll call Z.com. There are two offices (atl.Z.com, tam.Z.com). There is also a
<a href="http://www.Z.com">www.Z.com</a> hosted outside these networks, and the Hosting Provider provides an alias to that, known simply as “Z.com.” All pretty simple.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Since each office is independent, I have kept a simple DNSMASQ configuration, which you can see below. (There were attempts to set up atl.Z.com and tam.Z.com in each office’s DNSMASQ configuration, but these were met with difficulties
now forgotten. I think the difficulty was an issue with web server not coming up. If it’s important to resolution, I will pursue again and report the issues, but let’s get to the heart of the topic.)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Everything works OK until an incorrect hostname (or the name of a host that happens to be down) is referenced in either office. For example, if I type “ssh myhostess” and there is no “myhostess” on the current network, then the name is
magically resolved to the <a href="http://www.Z.com">www.Z.com</a> address, and I get the password prompt from there. Not what I’d want; I’d prefer the lookup to fail - which would then fail the ssh command - but I don’t see a way to make that happen.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there something I can do in this configuration to cause, for example, lists.thekelleys.org.uk to be resolved externally, but to keep the Z.com stuff between the walls? And would this in fact be squared away by pursuing the atl.Z.com
(etc.) concept? (I fear that would not resolve this.) I could remove the alias to simply Z.com, and that might do it, but I’d prefer not to do that, and anyway I’m not sure why it would fix this.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have the following DNS configuration in each office. The dhcp-boot is not used at present, so may not be quite up to snuff.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText">domain-needed<o:p></o:p></p>
<p class="MsoPlainText">bogus-priv<o:p></o:p></p>
<p class="MsoPlainText">expand-hosts<o:p></o:p></p>
<p class="MsoPlainText">domain=Z.com<o:p></o:p></p>
<p class="MsoPlainText">dhcp-range=192.168.158.10,192.168.158.109,7d<o:p></o:p></p>
<p class="MsoPlainText">dhcp-host=88:87:17:12:69:4d,canon-8120<o:p></o:p></p>
<p class="MsoPlainText">dhcp-host=00:23:8b:8a:ad:70,aspire<o:p></o:p></p>
<p class="MsoPlainText">dhcp-host=00:26:F2:DB:95:0C,stora-0<o:p></o:p></p>
<p class="MsoPlainText">dhcp-host=C0:3F:0E:BC:43:B9,stora-2<o:p></o:p></p>
<p class="MsoPlainText">dhcp-host=e0:91:f5:7c:7c:56,stora-3<o:p></o:p></p>
<p class="MsoPlainText">dhcp-option=option:router,192.168.158.1<o:p></o:p></p>
<p class="MsoPlainText">dhcp-boot=pxelinux.0<o:p></o:p></p>
<p class="MsoPlainText">dhcp-boot=aspire-lucid/pxelinux.0<o:p></o:p></p>
<p class="MsoPlainText">dhcp-match=set:gpxe,175 # gPXE sends a 175 option.<o:p></o:p></p>
<p class="MsoPlainText">enable-tftp<o:p></o:p></p>
<p class="MsoPlainText">tftp-root=/home/tftpd<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</body>
</html>
<BR>_____________________________________________________________
<FONT size=2><BR>
DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.</FONT>