Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I imagine an excellent answer to this question is already here somewhere, but I can't find it...

I want to configure an intranet Windows Server 2003 DNS server to provide the internal IP addresses of certain local (intranet) servers, but pass everything else to an external DNS server. For example, if has an entry pointing to, and I ping, it'll resolve to, but if I ping, which does not have an entry in my local DNS server, it'll get forwarded to a public internet-located DNS server.

Can anybody tell me how to do this?

share|improve this question
up vote 1 down vote accepted

You can create forward lookup zones on your internal DNS server that have the FQDN of the server you want to host the info for, then create an A record that you don't give a name to and give it your internal IP.

For your example: create a new forward lookup zone called, create an A records with the name box empty and put in for the IP.

You can now ping and get your internal address, because your server is authoritative for that domain, but it will pass along because it doesn't host that zone.

share|improve this answer
This worked - awesome!! Thanks! – user49085 Jul 26 '10 at 17:19

you should configure the forward dns servers in your internal dns server to point to external accessible dns servers like google's. In the dns management console, select your dns server, rigth click -> properties. Select tab forwarders and enter your dns servers there.

share|improve this answer
This doesn't really address his question – tore- Jul 26 '10 at 7:05

This is doable. You need to create a new DNS zone in Windows for each server, time consuming but it works. For that new zone, you need to create one A record.

Example, zone Is authoriative on host

Then on your local DNS, you will need to create a new zone, then create a A record in that zone to point to

If you query your local DNS server for, it will return, if you query for, the DNS server (if configured so) will use it forwarders to try to resolve the name for you.

share|improve this answer
You are correct. I thought he was saying his internal DNS was authoritative for He wouldn't be able to at that point though, right? Isn't my first sentence correct? – TheCleaner Jul 27 '10 at 20:17
Still, if was internally defined and auth. this would work as well. – tore- Jul 28 '10 at 12:35

I'm not aware that you can do this if your local DNS server is authoritative for "". In that case, you'll have to create an entry for "" pointing to its external IP and for any other "internet IP addressed" host on the domain.

Your DNS server won't say "well, I don't have it...but I'll forward it onto someone else" if it is authoritative for that domain.

Google "split DNS Windows" for more information.

Long story short: If your local DNS server is authoritative (has a forward lookup zone) for then it will need A records for ALL hosts you want to resolve on whether internal or external.

share|improve this answer
This is doable, read my answer. – tore- Jul 26 '10 at 7:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.