11–20 of 35 posts
I want to note that I mean to use such internal hostnames to reach services inside a VPN. If solutions such as IPsec or OpenVPN can somehow push and manifest host->IP correlations for the OS, as an alternative to pushing an additional DNS resolver living inside the VPN, that would also be a viable solution.
1. Buy domain for your service 2. Make wildcard record to point to 127.0.0.1 3. User can apply any.thing.here.yourcompanyinternal.xxx
but `--host-resolver-rules` may work, https://chromium.googlesource.com/chromium/src/+/main/net/ba... @terry_hc
1. Buy domain for your service 2. Make wildcard record to point to 127.0.0.1 3. User can apply any.thing.here.yourcompanyinternal.xxx
https://en.wikipedia.org/wiki/DNS_rebinding protection will stop this from working "hopefully" ;) but `--host-resolver-rules` may work, https://chromium.googlesource.com/chromium/src/+/main/net/ba... @terry_hc
Does anyone actually ban 127 resolution to stop dns rebinding? I feel like that would probably break a lot of things while not actually preventing dns rebinding.
Earlier quoted context omitted.
https://en.wikipedia.org/wiki/DNS_rebinding protection will stop this from working "hopefully" ;) but `--host-resolver-rules` may work, https://chromium.googlesource.com/chromium/src/+/main/net/ba... @terry_hc
> https://en.wikipedia.org/wiki/DNS_rebinding protection will stop this from working "hopefully" ;) Does anyone actually ban 127 resolution to stop dns rebinding? I feel like that would probably break a lot of things while not actually preventing dns rebinding.
https://nip.io/
e.g. 10.2.3.4.anyz.one will refer the recursive resolver to query 10.2.3.4 for the answer to the query. You can also buy a domain and configure it to do that, but this is quicker
Disclosure: I wrote anyzone
I want to note that I mean to use such internal hostnames to reach services inside a VPN. If solutions such as IPsec or OpenVPN can somehow push and manifest host->IP correlations for the OS, as an alternative to pushing an additional DNS resolver living inside the VPN, that would also be a viable solution.
Tailscale is very easy to set up and provides resolvable hostnames (at an OS level) for all connected devices.
I want to note that I mean to use such internal hostnames to reach services inside a VPN. If solutions such as IPsec or OpenVPN can somehow push and manifest host->IP correlations for the OS, as an alternative to pushing an additional DNS resolver living inside the VPN, that would also be a viable solution.
Tailscale is very easy to set up and provides resolvable hostnames (at an OS level) for all connected devices.