News for hackers. Stuff that matters.

A comment on WireHole is a combination of WireGuard, Pi-hole, and Unbound. Parent comment

Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by josephcsible on Saturday October 28, 2023 @07:45PM (#38054542)
What should you use for internal records if you don't own a domain?
[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by ibbtown on Saturday October 28, 2023 @08:36PM (#38054816)
.loc instead of .local government is fine
[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by josephcsible on Saturday October 28, 2023 @08:38PM (#38054829)
But that TLD isn't reserved, so couldn't someone register it as a real gTLD tomorrow?
[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by joshspankit on Saturday October 28, 2023 @09:59PM (#38055250)
You can use anything that’s not already a domain (and unlikely to be one created by someone else).

josephcsibleinternaldomain.com as a spitball

[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by NewJazz on Saturday October 28, 2023 @10:47PM (#38055455)
.internal
[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by dylan604 on Saturday October 28, 2023 @11:41PM (#38055666)
I've seen .test used in some guides
[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by yoshamano on Sunday October 29, 2023 @01:29AM (#38056011)
home.arpa

https://datatracker.ietf.org/doc/html/rfc8375

[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by jaeckel on Sunday October 29, 2023 @04:11AM (#38056687)
One can also use one of the three .home .corp or .mail as of [0]. I'm not aware of an RFC that writes down that those are OK to use, but if the iCANN already pinky sweared that this is OK, what could go wrong?

[0] https://www.icann.org/resources/board-material/resolutions-2...

[ Parent | on HN ]
Re:WireHole is a combination of WireGuard, Pi-hole, and Unbound by globular-toast on Sunday October 29, 2023 @04:33AM (#38056764)
.home.arpa is meant for this. It's supposed never resolve to any internet address so even if a DNS query ends up outside your network (like if an application handles DNS itself) it won't resolve to an internet address and send data there.

You can add .home.arpa to you DNS search path (configurable with DHCP) so you don't have to type it, e.g. if you look up "nas" your computer will try "nas.home.arpa" too.

[ Parent | on HN ]