Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

we have a domain name which is used in our headquter. resolves to the headquaters external ip (dynamic DNS) and the subdomains to hosts/servers.

now we got a second buero connected via VPN to the headquater. In order to be able to resolve those hosts/servers without adding the main-dns-server (which is only reachable via vpn) as the new bueros primary DNS I would like to sync the headquaters zone-files to the bueros DNS (bind) server.

This works but i have the problem, that once I'm using this zone "" is resolved to an internal address so I'm no longer able to establish my VPN-connection.

any hints what I'm doing wrong ?

I've read about subzone forwarding and tried to forward "" to an external DNS-server and make the VPN use instead of ( is CNAME for but I could not get it to work...

Is this the right direction or are there better solutions ?


share|improve this question

You probably want to define different views for the zone that answer differently depending on the source of the request.

I don't know where you read about "subzone forwarding", but it is not an existing concept in BIND or DNS; you can either forward a zone, or delegate a zone, to another nameserver.

View documentation

Zone delegation documentation

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.