< allow-recursion { any; };
---
> allow-recursion { internal; };
> acl "internal" {
> 10.0.0.0/8;
> localhost;
> localnets;
> };
Hi,
to my knowledge IPA's DNS server is Bind.
And this server is working as recursive DNS for internal domains.
Question:
Can I use this DNS server for recursive DNS request of external domains, too?
If yes, how?
My intention is to send client request to Pi-hole first for DNS filtering; Pi-hole will act as DHCP, too.
If IPA's DNS server bind does recurse, then I would have it set as the upstream to Pi-hole.
Client --> Pi-hole --> IPA --> Internet
In case IPA's DNS server does not support recurse DNS for external domains, then I consider to add another service proving recurse DNS only: unbound DNS.
Client --> Pi-hole --> IPA --> Unbound --> Internet
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org