I have a machine that runs both a caching DNS server (to answer localqueries) and an authoritative DNS server; the caching server is bound tolocalhost:53, and the authoritative server to my-IP:53. Recently I wantedto let another machine use the caching DNS server.

The obvious general approach is to remap queries from the specific IP sothat they hit the caching nameserver instead of the authoritative one.I can see two ways of doing this with Linux iptables: DNAT and REDIRECT.

This week, we:

• got 14,794 messages from 260 different IP addresses.
• handled 20,016 sessions from 1,207 different IP addresses.
• received 186,129 connections from at least 47,733 different IPaddresses.
• hit a highwater of 37 connections being checked at once.

Volume is around that of last week ; Idon't know what to make of the increasing highwater. The volumedoesn't fluctuate

Aigars Mahinovs recently wrote in passing in a blog entry :

So, from this perspective, there is nothing bad in money being paidto do this mundane and hard work, if we really, really need torelease in a specific time frame ( IMHO the only reason to releaseDebian in 2006, as opposed to 2008, is the Lars tattoo bet ).

(Emphasis mine.)

This is the kind of thing that makes me reach for my editor and flailat the keyboard. There

Something that's recently struck me:

Ignorance often makes it easier to do things, because you don't knowenough to become paralyzed with indecision.

If I'd known what I now know about bicycles when I bought my bike , I might never got it. Back then I just went to a localbike shop a co-worker liked with the determination to stop delaying andget a bike that was neither too cheap nor too expensive. These days Iwould probably be trying to make up my mind about