Hot answers tagged

2

Sshd doesn't care where the connection is coming from, if it's configured to do a reverse DNS lookup, it does.


2

As @Tombart says well, the delay is due to waiting for IPv6 resolution timeout. Another possible course of action is giving precedence to IPv4 in /etc/gai.conf From comments in /etc/gai.conf # For sites which prefer IPv4 connections change the last line to # precedence ::ffff:0:0/96 100 After changing gai.conf, you need to restart any app using the ...


2

Short answer: A workaround is forcing glibc to reuse a socket for look up of the AAAAand A records, by adding a line to /etc/resolv.conf: options single-request-reopen The real cause of this issue might be: malconfigured firewall or a router (e.g. a Juniper firewall configuration described here) which causes dropping AAAA DNS packets bug in DNS server ...


2

The domain .local is reserved for use by hosts that can be auto-discovered by the mdns protocol (broadcasts on the local network). You might get it working by installing and running avahi, or more simply by removing the mdns4_minimal [NOTFOUND=return] part from your nsswitch.conf. To test an address use eg getent hosts mywebserver.mydomain.local.


2

Windows clients automatically register their names in DNS when part of Active Directory (which seems to be true in your case). This uses a process called Dynamic DNS (DDNS). The easiest way to register linux machines with a Windows DDNS will be to use Samba to join your linux machine to Windows Domain. This would require the rights to join Windows Domain. A ...


2

I am not aware BIND does allow changing globally the minimum TTL for answers for which is not authoritative besides making patches to the source code. This article gives a hint about it. http://serverfault.com/questions/113954/how-can-i-override-ttl-of-an-internet-address However, dnsmasq and Unbound can do it; you just have to use one of them instead of ...


1

You can set the option UseDNS no in the file /etc/ssh/sshd_config on your server to tell sshd(8) not to do DNS lookups.


1

The OpenVPN package has a script for this in /etc/openvpn/update-resolv-conf. You need to configure it with: up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf This will fetch the DNS server addresses from the dhcp-option DNS options passed by the OpenVPN peer/server and configure resolvconf accordingly. It handles dhcp-option DOMAIN ...



Only top voted, non community-wiki answers of a minimum length are eligible