private interfaces, dnsmasq, ....

[kjonca]

For now I have used debian's implementation of resolvconv, with heavily modified dnsmasq script (mainly for add some search domains for one of vpn interface)
I am curious if I can use openresolv, so I have some question.

1. private interface - do I understand correctly that this only mean that relevant nameserver is simply not pushed to nameservers list, and information is not passed to subscribers? (dnsmasq has 'server=' option which might be useful here, i believe that bind also can use proper forwarder configuration"
2. Assume I want to modify dnsmasq subsriber script - the only way is to edit "/lib/resolvconf" - there is no mechanism to use something in etc?

[rsmarples]

1. It is passed to subscribers but as a forward domain only.
2. It's possible but why would you want to? What's you're use case?

[kjonca]

1. It is passed to subscribers but as a forward domain only.

What do you mean? If I properly understand the code "private" causes that nameservers is not added to global nameserver list. Am I wrong?

2. It's possible but why would you want to? What's you're use case?

a) if I understand correctly, current dnsmasq script does not utilize "server=" option EDIT: I was probably wrong.
b) assume that at work I got "work.xyz" domain to search - in that case, when I recognise that I got work interface (this might be dhcp or vpn) I also want to search work1.xyz and work2.xyz domain through this interface.

[rsmarples]

1. It means they are not added to the global nameserver list, but they are added as forwarders for the zones listed in search / domain options if you have setup your local dns resolver (ie not the default libc).

2. "Through this interface" has no meaming in DNS lookup.
   Do I understand that you want to append/prepend custom forward zones to the nameservers listed based on some criteria such as work.xyz appearing in the search / domain option?
   Would a simple append/prepend based on matching be sufficient? Something like this?

search_domains_append_match="work.xyz/work1.xyz work.xyz/work2.xyz another.place/this.place"

[kjonca]

"Do I understand that you want to append/prepend custom forward zones to the nameservers listed based on some criteria such as work.xyz appearing in the search / domain option?"

more-or-less - yes.

In my case (i use dnsmasq as resolver) when I found 'work.xyz' in proper option in vpn/dhcp I create
something like "server=/work.xyz/work1.xyz/nameserver_here"
in dnsmasq config.

Would a simple append/prepend based on matching be sufficient?

To be honest - I do not know.