[Dnssec-trigger] OS X, resolv.conf

W.C.A. Wijngaards wouter at NLnetLabs.nl
Tue Jan 3 15:04:09 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Phil,

On 01/03/2012 03:36 PM, Phil Regnauld wrote:
> W.C.A. Wijngaards (wouter) writes:
>> with eg:
>> sudo vi /etc/dnssec-trigger/dnssec-trigger.conf
>> or use another editor that you like.
>>
>> And change xyz.fr or put a commentsign (#) at the start of that line.
>>
>> The config file is documented, so it should be (relatively) obvious.
> 
> 	Right, I've played around with it, and commented out the domain: and
> 	search: parameters.
> 
> 	Now, dns settings show "nothing.invalid" as the search suffix.
> 
> 	I see the comment:
> 
> 	# the search path from DHCP is not picked up, it could be used to misdirect.
> 
> 	Is there a way to override this behaviour ? That's a policy decision.

There is no way to override this behaviour (at this time), and it would
be somewhat difficult to make portable.

If you need a couple you use you can put the search path into the config
file manually, at this time.  This is why I pick it up on install, e.g.
if you install at home/work you get the 'right' DHCP searchpath all the
time.

Best regards,
   Wouter

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
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=ItQ2
-----END PGP SIGNATURE-----



More information about the dnssec-trigger mailing list