Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a subnet shared by two domains which has its own DNS servers. Forward lookup zone does not have a problem because the workstations will go and register itself on its respective DNS server. I have problem in setting up the reverse lookup zone. How do I setup the reverse lookup zone so that I can nslookup on any addresses from any domain and I get the correct reply back.

share|improve this question
1  
Which OS is your DNS server running. Which DNS server software are you using ? –  Iain Sep 20 '11 at 7:49
    
Windows Server 2008 R2 –  Raj Sep 20 '11 at 8:01

2 Answers 2

From what I understand about your request, you want to have a delegation for in-addr.arpa resolution (reverse lookups) at a sub-class level. You might take a look at this document describing the process in some detail or refer to RFC 2317 which describes the IETF best current practice on this topic.

The trouble with your Windows domains would be that you probably let your clients (or DHCP servers) update the reverse lookup zones on your DNS servers - these update mechanisms are unaware of any eventual classless delegation setups and cannot be configured to function correctly in these environments. If you need this, you probably will have to script your DNS servers to "copy" the PTR records within the zone to your CIDR-delegated zone. You can do this using either dnscmd, the "DnsShell" powershell module or the DNS WMI provider.

share|improve this answer
    
Thank you for the post. I am just learning DNS and this is too complicated for me. –  Raj Sep 20 '11 at 23:38
    
If you do not have the need for secure dynamic updates, you also might consider setting up a single reverse lookup zone (e.g. 0.168.192.in-addr.arpa) in one domain and a stub zone pointing to the authoritative one in the other domain - this way dynamic updates as well as queries should hit the authoritative server - no matter which domain they come from. The authoritative in-addr.arpa zone has to be able to accept non-secure dynamic updates as well –  the-wabbit Sep 21 '11 at 15:13

Take a look here. It explains how to configure a reverse DNS zone on Windows Server.

Also, you need to ask your upstream provider the delegation of the reverse DNS lookup zone for your subnet.

share|improve this answer
    
I have no problem setting the reverse llokup zone. –  Raj Sep 20 '11 at 23:44
    
My problem is not how to setup a reverse lookup zone. I have one subnet sharing between two domains and I want to combine PTR records for two different domain DNS at one place so that I can do a nslookup and get correct name resolution no matter which domain the client is in. Thank you, –  Raj Sep 20 '11 at 23:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.