Sponsored Content
Special Forums UNIX and Linux Applications Using avahi to publish IPV6 DNSservers - Security? Post 302969187 by darktux on Saturday 19th of March 2016 10:02:47 AM
Old 03-19-2016
[Solved] Using avahi to publish IPV6 DNSservers - Security?

Hello,

we use here internal avahi to publish IPV6 DNSservers. It was the easiest way for us to use the service with radvd. Here is the part from the avahiconf:
publish-dns-servers=IPV6adress-dns-server
This works really fine. But my problem is the security. When you have this config for example in an public locaten. Some go here and broadcast his own dnsserver.

There is some file "/etc/mdns.allow". Here can you set domainnames. But this is only "from this client". For example: "tux.at"
When this is set, only client in the avahi-domain "tux.at" are dissolvable.

But what I would like to know is, is there a place on the client where i can set the IPadress of the server that is allowed to publish his dnsservers?

Thanks for help
Best Regards

Last edited by darktux; 04-22-2016 at 05:32 PM..
 

5 More Discussions You Might Find Interesting

1. Programming

Unable to publish data

Hi All, In my application, we are using Publish/subscribe model implemented in JAVA and when I implemented it on windows to windows os,it is working fine and able to publish the right data and even when I am trying the same between two different OS i.e between Windows and Solaris sparc or... (1 Reply)
Discussion started by: smartgupta
1 Replies

2. UNIX for Dummies Questions & Answers

avahi , change the log location

avahi error message goes to /var/log/messages , how can put avahi to log the error in a file /var/log/avahi-error instead of /var/log/messages (1 Reply)
Discussion started by: prpkrk
1 Replies

3. UNIX for Dummies Questions & Answers

Assigning ipv6 to bonding interface - getting old as well as changed ipv6 in ifconfig output

Hi, I have created a bonding bond1 interface with 6 Eth , mode=4. Recently i have changed my old ipv6 to new one and tried to restart as well as reload network service. Post which i can see old as well as changed ipv6 in ifconfig command output. Below are few files and command output for your... (1 Reply)
Discussion started by: omkar.jadhav
1 Replies

4. UNIX and Linux Applications

Publish notification

hi All I use tomcat server to publish war file. How to send an notification to users via the application screen and it should dismiss once user clicks X mark. Any suggestions ? (0 Replies)
Discussion started by: anil529
0 Replies

5. Web Development

Publish notification

hi All I use tomcat server to publish war file. How to send an notification to users via the application screen and it should dismiss once user clicks X mark. Any suggestions ? (1 Reply)
Discussion started by: anil529
1 Replies
avahi-publish-service(1)				      General Commands Manual					  avahi-publish-service(1)

NAME
avahi-publish-service - Register an mDNS/DNS-SD service or host name or address mapping using the Avahi daemon SYNOPSIS
avahi-publish -s [options] name service-type port [TXT data ...] avahi-publish-service [options] name service-type port [TXT data ...] avahi-publish -a [options] host name address avahi-publish-address [options] host name address DESCRIPTION
Register an mDNS/DNS-SD service or host name/address mapping using the Avahi daemon. OPTIONS
When calling in service registration mode, specify a DNS-SD service name (e.g. "Lennart's Files"), a service type (e.g. _http._tcp) and an IP port number for the service, optionally followed by any number of TXT record strings on the command line. When calling in address/host name registration mode specify a fully qualified host name and an address (IPv4 or IPv6). -s | --service Register a service. avahi-publish-service is equivalent to avahi-publish -s. -a | --address Register an address/host name mapping. avahi-publish-address is equivalent to avahi-publish -a. -v | --verbose Enable verbose mode. -H | --host= HOSTNAME Specify a host name for this service, in case it doesn't reside on the local host. This host name needs to be fully qualified and resolvable using mDNS or unicast DNS. -d | --domain= DOMAIN Publish the service in the specified domain. If omitted the Avahi daemon will publish it in its default domain (usually .local). --subtype= SUBTYPE Register the service with an additional subtype in addition to the main type. DNS-SD subtypes have the form _anon._sub._ftp._tcp, where _anon is the identifier of the subtype and _ftp._tcp is the main type. You may pass this option multiple times to register the service with multiple subtypes. -f | --no-fail Don't fail if the daemon is not found running. Instead, wait until it appears. If it disconnects, try to reconnect. -h | --help Show help -V | --version Show version information. AUTHORS
The Avahi Developers <avahi (at) lists (dot) freedesktop (dot) org>; Avahi is available from http://avahi.org/ SEE ALSO
avahi-resolve(1), avahi-browse(1), avahi-daemon(8) COMMENTS
This man page was written using xml2man(1) by Oliver Kurth. Manuals User avahi-publish-service(1)
All times are GMT -4. The time now is 10:45 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy