Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

we have a domain name example.org which is used in our headquter.

example.org resolves to the headquaters external ip (dynamic DNS) and the subdomains to hosts/servers.

now we got a second buero connected via VPN to the headquater. In order to be able to resolve those hosts/servers without adding the main-dns-server (which is only reachable via vpn) as the new bueros primary DNS I would like to sync the headquaters zone-files to the bueros DNS (bind) server.

This works but i have the problem, that once I'm using this zone "example.org" is resolved to an internal address so I'm no longer able to establish my VPN-connection.

any hints what I'm doing wrong ?

I've read about subzone forwarding and tried to forward "ext.example.org" to an external DNS-server and make the VPN use ext.example.org instead of example.org (ext.example.org is CNAME for example.org) but I could not get it to work...

Is this the right direction or are there better solutions ?

Thanks.

share|improve this question

1 Answer 1

You probably want to define different views for the zone that answer differently depending on the source of the request.

I don't know where you read about "subzone forwarding", but it is not an existing concept in BIND or DNS; you can either forward a zone, or delegate a zone, to another nameserver.

View documentation

Zone delegation documentation

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.