| Author |
Message |
thoward
Joined: 28 Jan 2010
Posts: 2
|
| Posted: Thu Jan 28, 2010 5:17 pm Post subject: Internal Domain |
|
|
Hi,
This may be a stupid question but I was wondering whether its possible to set up a sub-domain to only be visable between my linodes? I've set up private Ips, but the only way I could think of doing this is to set up a record in the /etc/hosts file.
Any help is appriciated! |
|
| Back to top |
|
jeremiah
Joined: 16 Mar 2009
Posts: 1
Location: Gothenburg, Sweden
|
| Posted: Thu Jan 28, 2010 5:28 pm Post subject: |
|
|
| If you put the domain name in /etc/hosts on both machines, it should work like a charm. :) |
|
| Back to top |
|
hybinet
Joined: 02 May 2008
Posts: 971
|
| Posted: Thu Jan 28, 2010 5:28 pm Post subject: |
|
|
| Alternatively, you could add an A record in the DNS, pointing the subdomain to an internal IP address (192.168.x.x). The records would be publicly visible, though. |
|
| Back to top |
|
thoward
Joined: 28 Jan 2010
Posts: 2
|
| Posted: Thu Jan 28, 2010 5:45 pm Post subject: |
|
|
| Yea I thought of the DNS record, but wasn't too sure about it being publicly available. What I might just do is set it up as an external domain then (attempt) to lock the server down to only accept internal connections. |
|
| Back to top |
|
MrRx7
Joined: 21 May 2008
Posts: 46
Location: Austin, Tx
|
| Posted: Wed Feb 03, 2010 4:31 pm Post subject: |
|
|
thoward wrote: Yea I thought of the DNS record, but wasn't too sure about it being publicly available. What I might just do is set it up as an external domain then (attempt) to lock the server down to only accept internal connections.
From a security standpoint you should be blocking all traffic on the internal lan anyways..
but if you just want a internal domain just use hosts files, would be more secure than using dns. |
|
| Back to top |
|
mnordhoff
Joined: 03 May 2008
Posts: 412
|
| Posted: Wed Feb 03, 2010 4:39 pm Post subject: |
|
|
Security (that is, actual, real security) does not break down if someone knows your IP address. Putting your private IP in the public DNS isn't a problem; anyone could port scan the private network anyway.
Edit: Does not! Does not break down. Oops. |
|
| Back to top |
|
kbrantley
Joined: 21 Sep 2007
Posts: 77
|
| Posted: Wed Feb 03, 2010 6:14 pm Post subject: |
|
|
| http://www.bind9.net/manual/bind/9.3.2/Bv9ARM.ch04.html#id2549203 |
|
| Back to top |
|
| |