Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a local DNS server that tracks all of my machines in my house, provides caching from the internet on commonly-used look-ups, etc.

I'd like to use that to cache both the internet and the DNS provided by work via VPN.

When I connect to the office, I'm using OpenConnect, which is VPN over SSL - this requires a few DNS lookups before I connect. And, oddly, none of them work with internal DNS lookup.

So, what I'd like to do is find a way to:

  1. Always look up from my local copy of bind. (nameserver, I would think, and I can chattr the +i /etc/resolv.conf to avoid it from being modified when I connect to VPN)
  2. Use the corporate DNS when looking for *
  3. **Fall back** to my local DNS when the corporate DNS fails (either unreachable or otherwise)
  4. Otherwise use my master for my internal domain, or my ISP/Google DNS for everything else.

I kind of had this working prior to openconnect - with vpnc, the IP I connected to was static, so I could hard-code it and not worry about it changing. However, with openconnect, I connect to one site, and it redirects me to one of another sites (so far, I've seen two possibilities). So I need the DNS to work for those, and those are all * as well.

Any suggestions are highly appreciated.

share|improve this question

You must log in to answer this question.

Browse other questions tagged .