OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: lrosenman on April 02, 2019, 10:52:02 pm

Title: [SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 02, 2019, 10:52:02 pm

I'm coming back to OPNSense after a LONG break and was wondering if the DHCPD in current production can support doing DNS updates to a foreign (to OPNSense) DNS server (my server on a different network, using BIND 9.13.x) via an NSUPDATE type message, but using T-SIG keys?

Title: Re: DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 03, 2019, 12:41:20 am

Basically if we're using ISC DHCPD, where can I add statements to the dhcpd.conf that won't get wiped by the GUI making changes.

Title: Re: DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 03, 2019, 02:30:58 am

Well, I'll be.... If I set up a static address on an interface, I get the ability to set all this up already.

Never mind.

Title: Re: DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: franco on April 03, 2019, 11:01:09 am

Hey,

Indeed, from the original topic it was hard to infer that dynamic interface configuration got in the way of enabling DHCPD, but I'm glad it's all there. :)

Also: Welcome back!


Cheers,
Franco

Title: Re: [SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 03, 2019, 06:36:12 pm

working great with https://github.com/aus/pfatt (with a minor mod to skip some pfSense specifics).

Now I can get all the info I need/want, and it all works.

Thanks for a great product! (running on an old protectli FW1).

Title: Re: [SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: franco on April 03, 2019, 07:35:50 pm

Neat. Are you also running 6RD on this?


Cheers,
Franco

Title: Re: [SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 03, 2019, 07:43:20 pm

Nope.  ATT went native IPv6 a long while ago, so it's pure IPv6. no 6RD.

Title: Re: [SOLVED] DHCP: update a foreign (to OPNSense) nameserver with nsupdate/t-sig?
Post by: lrosenman on April 03, 2019, 07:55:38 pm

BTW, any chance of y'all making a plugin for the aus/pfatt stuff?