1

We have a Windows office network with a local Actice Directory/DNS domain server. The server is set up with OpenDNS's servers as forwarders (see screenshot). However, when I look at my OpenDNS query statistics, I notice that the 3rd most popular query is *.in-addr-arpa, and the 12th is *.local which is from our local domain.

Should I, or how can I prevent these local queries from going beyond my local network?

1 Answer 1

1

To prevent internal queries from being forwarded to the outside DNS server, your internal DNS server needs to be authoritative for the internal zones, not just the subdomains of them that you're using.

However, you seem to have a misconception here; in-addr.arpa is not internal to your network; it is used for all IPv4 reverse name lookups for every address on the internet. Do not make your internal server think it's authoritative for all of in-addr.arpa.

6
  • So I need to create a new forward lookup zone for just "local"? rather than just mysubdomain.local? Will that be enough to make it authoritative?
    – Baodad
    Apr 2, 2012 at 18:14
  • Yes, it will. The queries making it out of your network are outside of mysubdomain.local, correct? Apr 2, 2012 at 18:19
  • I can't tell exactly what ".local" queries are making it beyond my network. All I know is what is shown in my OpenDNS statistics screenshot linked in my original question, which shows ".local". I guess I will need to turn on debug logging?
    – Baodad
    Apr 2, 2012 at 18:29
  • Turned on debug logging but still can't find any .local dns queries that are not prepended by one of my subdomains.
    – Baodad
    Apr 3, 2012 at 18:49
  • So are queries for a subdomain your server's authoritative for making it out to OpenDNS? Apr 3, 2012 at 19:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .