Skip to content

Instantly share code, notes, and snippets.

@tetsuyainfra
Created September 7, 2017 06:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tetsuyainfra/f6cc618b54eba8c4f51fba7fdc56def2 to your computer and use it in GitHub Desktop.
Save tetsuyainfra/f6cc618b54eba8c4f51fba7fdc56def2 to your computer and use it in GitHub Desktop.
DNS権威サーバーとキャッシュサーバが同居してて、isc-dhcpdでDDNSするときの覚書 ref: http://qiita.com/tetsuyainfra/items/0980e3fedf31c228e907
ddns-updates on;
ddns-update-style interim;
update-static-leases on;
subnet 10.0.100.0 netmask 255.255.255.0 {
zone stg.home.local. {
primary 127.0.0.2; ← ここ
key DHCP_UPDATER;
}
zone 100.0.10.in-addr.arpa. {
primary 127.0.0.2; ← ここ
key DHCP_UPDATER;
}
}
# firewall-cmd --direct --add-rule ipv4 nat OUTPUT 100 -p
udp -d 127.0.0.2/32 --dport 53 -j DNAT --to-destination 127.0.0.1:10053
問題なければ・・・
# firewall-cmd --permanent --direct --add-rule ipv4 nat OUTPUT 100 -p udp -d 127.0.0.2/32 --dport 53 -j DNAT --to-destination 127.0.0.1:1005
# firewall-cmd --reload
ダイレクトルールの一覧確認
# firewall-cmd --direct --get-all-rules
iptablesの設定確認
# iptables-save
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment