Questions tagged [internal-dns]
DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.
905
questions
0
votes
2
answers
2k
views
DNS Record to "redirect" from old server to new server
I have a question regarding DNS:
I have the following setup:
srv-old.example.com | Host(A) | 192.168.1.2 | timestamp
srv-new.example.com | Host(A) | 192.168.1.3 | static
can I just add another ...
1
vote
1
answer
523
views
BIND9 - dig is unable to resolve from different server
$ named -v
BIND 9.16.1-Ubuntu (Stable Release) <id:d497c32>
I have 3 servers configured in digitalocean nyc1 all in the same subnet
on server01 - I have installed bind9 and configured the zones ...
2
votes
2
answers
1k
views
How to get private Elastic-Beanstalk Environment DNS Endpoint?
My setup is the following:
i have a VPC consisting of 3 subnets: public, private with NAT and isolated.
I have an elastic beanstalk (single instance) environment running in the private subnet with Nat ...
1
vote
0
answers
286
views
how to make unbound hold many queries for non cached address to cache it first
I am looking for a way to make unbound hold queries for the same address lookup when it is not cached. It should let only one query to be processed, after that answer cached it can reply other queries ...
0
votes
2
answers
545
views
ISC DHCP/DDNS setup: Static entries for non-dhcp clients
I have set up a local network with ISC BIND9 and DHCP service. New leases trigger the DHCP to add an A and PTR record which works perfectly.
I also added lots of static host entries in the dhcpd.conf. ...
1
vote
1
answer
2k
views
Windows Server DNS Server Failure
I am having some issues with Windows Server 2022's DNS resolution and was hoping to get some insights. I have included some screenshots throughout the post
The server in question is running on HyperV, ...
0
votes
0
answers
26
views
DNS best practice for large resilience orientated org
I have been asked to investigate the resiliency of our DNS and it's config. What's the industry best practice around this?
The following have been suggested: the DNSAdmin group (which is usually ...
2
votes
0
answers
2k
views
Unable to resolve private dns zone over vpn with bind9 DNS
The Problem
I have a VPC in which I need to access the servers using private FQDNs. The VPC is accessible through a wireguard VPN. The VPN server also serves as a DNS server running BIND9. I have set ...
1
vote
1
answer
229
views
Weird Active Directory DNS Issue
I am having a DNS issue I cannot figure out. For one specific hostname, when I create an A record, the name ends up changing when it replicates to the other DNS servers in AD.
We currently have two ...
1
vote
1
answer
1k
views
Container DNS resolutions works only after restarting dnsmasq
[Update] add software versions
I have a home server which runs docker and DNS/DHCP for my home network. It's all working quite nicely except for one thing: Containers can't do DNS resolution after ...
0
votes
1
answer
237
views
Forward DNS local to Jira URL
I want to redirect my old helpdesk domain Help.company.com to Jira URL ( Company.atlassian.net/Jira/Helpdesk), it's a simple forwarding and don't want to keep the old URL .
I tried to do a CNAME but ...
0
votes
0
answers
638
views
How are external url's resolved by FreeIPA?
We are running FreeIPA version 4.6.8 on Centos 7.9.2009 and have multiple dns zones defined for local resources running inside our private network. For this to work we enter our ipa server's IP ...
0
votes
1
answer
106
views
Why the IP cannot be used directly when the IP mapped to the host name as a host entry works?
I was given an API for a service through which I tried to send a post message from server A, but the connection cannot be built. Then I ping the domain name in the API. It doesn't work, so I thought ...
0
votes
0
answers
2k
views
BIND9 DNS Issue : connection timed out; no servers could be reached from outside network
I am learning Bind9 and have setup Bind9 on Ubuntu 20.04.3 LTS
Here is named.conf file
options {
directory "/var/cache/bind";
listen-on { any; };
listen-on port 53 { any; };
...
0
votes
2
answers
2k
views
Creating a sub domain of our public domain for corporate/internal Active directory use. The public domain is also our Office 365 and Azure domain
Our current internal AD domain is example.local (set up long before I joined our team when this was a best practice)
Our Office 365 domain is a public, registered domain with GoDaddy which we use for ...
0
votes
1
answer
654
views
NGINX access module and internal DNS: How to allow only local clients
I searched through serverfault but couldn't find an answer to this. Maybe I just don't know the right keyword or it's a conceptual misunderstanding. Any help would be appreciated!
The situation:
My ...
2
votes
0
answers
424
views
Using a Dockered Unbound DNS server as a resolver for other containers
I'm using Unbound DNS server as a resolver for my home LAN. It runs as a Docker container on the default bridge network and in general it works as I'd expect it to, except when trying to use it as a ...
1
vote
1
answer
669
views
Is it possible to have both static and a dynamic A record created for the same host on an internal DNS server?
I am working on a case study related to risks from insecure dynamic DNS updates. Suppose there is an internal DNS configured that has a mix of static and dynamically created addresses. Consider a ...
1
vote
0
answers
287
views
Why Firefox doesnt work with split DNS / Host Overrides?
I have configured Host overrides in pfSense and other browsers like Chrome and Edge work fine but Firefox simply does not resolve giving "Unable to connect" error.
This is the same on my ...
0
votes
1
answer
2k
views
Obtain Let's Encrypt SSL Certificate for Internal Server on Internal DNS Server
I currently run an organization and we use a internal website that is hosted within our network that runs a Gitea Server so that we are able to access important documents without having to rely on a ...
1
vote
0
answers
2k
views
How I can configure my local machine to use a docker hosted dns server alonsside with ant other dns settings for specific domains?
I have the following docker-compose.yml used as php web app local solution:
version: "3.1"
services:
nginx:
image: nginx:1.13
volumes:
- "./configuration/nginx.conf:/...
0
votes
1
answer
179
views
How to make a domain name resolve to the same IP address as another domain name?
I have a AWS ELB to the gateway of an internal service.
I have some other host names that I need to be resolved to the same address as the ELB DNS name.
In my current set up, I'm using /etc/hosts to ...
-1
votes
1
answer
940
views
PowerDNS Auth and Recursor - Bug with one domain?
I have a problem with one of my domains on my private DNS.
I have two servers.
Server 1 with dnsdist. It directs to port 54 to server 2
Server 2 with powerdns (port 53) and powerdns-recursor (port 54)
...
-1
votes
2
answers
930
views
How to test DNS change on Mac before go live? [closed]
I need to test DNS changes before updating real DNS
I need to set up A records and CNAME
Any Mac software that let me do it and possibly easily switch ON / OFF?
1
vote
0
answers
193
views
Router with vpn client do not forward dns requests to the connected devices
I have a problem with my router forwarding dns requests to it's clients.
My setup is as follows. I have an ISP provider configured on my router and a vpn client connected. In the vpn's network there ...
0
votes
1
answer
1k
views
Get all hostnames in local DNS for current Windows server
I've deployed BGInfo from SysInternals to all of our servers, both physical and virtual. However, a few of our servers have multiple hostnames to support "backward compatibility" with some ...
1
vote
1
answer
2k
views
NFS not allowing hosts specified in config to mount share
I am having an issue where NFS is refusing to allow hosts that are specified in the config file to mount the share.
I am running an NFS server on Debian 10, BTRFS filesystem.
my /etc/exports reads:
/...
0
votes
0
answers
873
views
How can I force Active Directory integrated DNS to only return SRV records for specific domain controllers based on the subnet of the client?
I have a set of several offices joined using various combinations of IPsec VPNs and an MPLS network. The majority of sites form a mesh arrangement using the VPNs, but site B only has a single IPsec ...
2
votes
0
answers
160
views
SBS 2011 DNS server doesn't resolve forward lookup zones
I recently started a new job and inherited an antique in an SBS2011 server (yes, I know all the security risks and have raised this at EVERY management meeting). I have an issue with the DNS not ...
2
votes
2
answers
4k
views
named/bind is refusing to serve some domains after resolving them itself
Why is bind refusing some of my queries? This only happens for certain domains.
A query through named fails:
$ dig -t A fedoraproject.org @127.0.0.1
;; ->>HEADER<<- opcode: QUERY, status: ...
0
votes
1
answer
793
views
How do I create DNS entries for private addresses on AWS?
To do any ops work on our servers, we first need to ssh into a DMZ server with a public IP, before ssh-ing on to the app servers, with ips such as 172.16.3.239. I would rather have memorable hostnames,...
0
votes
0
answers
63
views
Web server, firewall and active directory: internal network connection error "DNS rebinding attack"
I have a problem with a web server (WS) (apache on ubuntu 20.04 server), Fortinet Firewall (FF) and windows Active Directory (AD). My ISP recently upgraded my Internet connection and changed some ...
0
votes
2
answers
266
views
Windows 10 / Chrome: HTTP browser request to IP address differs from same request to hostname
Agaoin, this is on Windows 10. I'm bringing in a new Ubuntu test web server (hpmicro1.lovelady.com) to our internal network, which is all in the lovelady.com domain. There's a DNS server on another ...
1
vote
1
answer
109
views
Balancing with MX records - How does this work?
enter image description hereplease can you help me with this, I have this scenario to balance email traffic, currently, most of the emails are going towards imail2.test.com.pe and imail.test.com.pe ...
0
votes
2
answers
2k
views
Docker macvlan drops UDP (DNS) traffic, TCP works
I'm trying to use macvlan to create a container that is a first-class citizen on my lan.
I'm using a static IP (although I understand that using some 'tricks' it's possible to use DHCP as well).
I ...
3
votes
0
answers
2k
views
dnsmasq: How to set alias domain / multiple DNS suffixes for local hostname resolution?
Is it possible to set multiple search domains via dnsmasq/DHCP? Due to some migration, I need multiple clients to be able to:
ping server.old-domain
ping server.new-domain
# both should work, .old-...
0
votes
3
answers
605
views
Designate installation on OpenStack failed
While trying to install designate on OpenStack Victoria on Ubuntu 20.04 using this guide
https://docs.openstack.org/designate/victoria/install/install-ubuntu.html
I'm getting this error
Updating Pools ...
1
vote
0
answers
276
views
NETLOGON trying to register with incorrect DNS server?
So, I have a Domain Controller DOMAINSERVER, and a second domain controller DS1. They are part of the domain office.mydomainname.com, and all was well in the world; DNS server was working great, ...
0
votes
2
answers
3k
views
Can't resolve external DNS record for domain in Azure Private DNS Zone
---EDITED TO REFLECT THE FACT I'M RUNNING MULTIPE COPIES OF THE APLCIATION ON THE ONE DOMAIN----
Having an issue that I can't quite work out, wondered if some fine person here had any experience!
I'm ...
0
votes
2
answers
251
views
Does AWS Route 53 private DNS work with Latency Based Routing?
Looking to setup a private DNS hosted zone in AWS Route 53. I would like to know if this configuration supports Latency Based Routing.
0
votes
2
answers
2k
views
Wouldn't setting the DNS server to 127.0.0.1 prevent my system from actually resolving remote hosts? I found this answer
Wouldn't setting the DNS server to 127.0.0.1 prevent my system from actually resolving remote hosts?
My business email server has the DNS set to the ISP given DNS servers. My Spamassassin is giving ...
1
vote
0
answers
129
views
Embed HTML resources from internal network within a public https page
We have a website for internal use only which however is hosted publicly on a regular internet domain, and it’s secured with https protocol.
However, the page contains http(s) links to resources (...
0
votes
1
answer
587
views
How to access a private zone via DNS peering
Let's say I have 2 projects (A, B), each with their own VPC and VPC peering enabled between them.
Then I create a private DNS zone in project A, let's say with .internal as DNS name. Then I add an A ...
-2
votes
2
answers
1k
views
bind9 separated zone file for *.sub.domain.com
I want to create sub subdomain that are only visible from my private network.
My named.conf.local looks like this:
acl internals {
127.0.0.0/8;
192.168.1.0/24;
};
view "internal" {
...
0
votes
1
answer
478
views
Bind9 forward top level domain
Hi all just starting working professionally with bind9 and dns, say I have an AD/DC server (with dns) running on internal.com but my bind9 is authoritative for sub.internal.com can I do a forward zone ...
1
vote
0
answers
52
views
Multiple servers behind one public IP [duplicate]
I am hosting multiple servers behind one public IP. (Mostly in Proxmox VE) Currently, all the services are on separate ports.
I would like to use multiple domains to reach different services and am ...
-1
votes
2
answers
2k
views
Conditional forwarder for subdomain through DNS proxy
I have a Windows AD domain : contoso.local
I want to forward all requests to some.contoso.local to another DNS server through forwarding DNS server:
contoso.Local.DNS => Proxy.DNS => some....
1
vote
2
answers
190
views
How to use another DNS Server when the PC is not in domain?
I have two DNS servers (on DCs) in my domain that my clients use when they are connected direct in office or with VPN. I want to set up another external DNS server, and tell the PCs to use this server ...
1
vote
1
answer
94
views
DNS Scavenging on Enterprise Environment
About DNS Scavenging in Microsoft Active Directory internal DNS server, why does by default it is not enabled? how do you usually implement this scavenging system on your enterprise? (what to look out ...
0
votes
1
answer
350
views
Identifying the TLD and SLD of a URL
I was given a question to identify different parts of a domain and I got the answer wrong. Here is the URL
enter https:\\www.example.co.uk
What is the,
Top-Level Domain?
Second Level Domain?
to which ...