Questions tagged [internal-dns]
DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.
902
questions
268
votes
12
answers
620k
views
List all DNS records in a domain using dig?
My company runs an internal DNS for mycompany.example
There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory.
...
33
votes
4
answers
57k
views
Difference between /etc/hosts and /etc/resolv.conf
What is the difference between /etc/hosts and /etc/resolv.conf? Also, is there a good documentation that explain all these configuration files.
Thank you.
Bala
28
votes
5
answers
288k
views
How do I determine what my DHCP server is?
I have a sad network left behind by some careless administrators - I am in the process of figuring out exactly what services are running where, not excluding the possibility that some services are ...
23
votes
13
answers
48k
views
Using .local for internal websites [duplicate]
Is it okay to use app.mycoolname.local for URLs that are private / internal?
We have several applications that are web based, but they are private apps and are not exposed to the public.
We have ...
19
votes
2
answers
986
views
Multiple reverse DNS record internal DNS
A user was having trouble connecting to the internet, some sites worked some sites did not.
I do not think it has anything to do with networking gear, but just in case.
2 firewall, Palo-Alto
4 ...
17
votes
4
answers
56k
views
DNS A record pointing to private IP address [duplicate]
I own a domain. I will call it example.com. I want to set up a local BIND server on my private network. I have a box with the private IP address of 192.168.2.13
I would like to have this box named ...
15
votes
1
answer
15k
views
What is the point of the zones.rfc1918 file for Bind9?
Using an Ubuntu 10.04 LTS server in a standalone environment and trying to use views to serve two different subnets of clients. Getting errors regarding the zones.rfc1918 file, so I'd like to know ...
15
votes
5
answers
65k
views
Querying DNS for CNAMEs for a server
Is there a way to query our internal DNS entries to discover all the CNAME entries that point to a particular server?
Edit: We're a Windows environment, Server 2003.
14
votes
2
answers
2k
views
Should engineering have its own DNS zone, delegate, or subdomain?
We have our organization's primary domain (with AD) example.com. In the past, previous admins have created several other zones - such as dmn.com, lab.example.com, dmn-geo.com etc - as well as ...
13
votes
3
answers
18k
views
unbound/nsd returning SERVFAIL resolving local LAN DNS. nsd alone works fine
I've been using unbound as a local recursive DNS server. Just added nsd to set up local LAN DNS. nsd is listening on port 53530 and that works fine:
$ dig @127.0.0.1 data2.datanet.home -p 53530
; &...
12
votes
4
answers
7k
views
Don't automatically include all subdomains in DNSMasq address
It is possible to configure DNSMasq such that it returns a fixed IP address only for a request for that exact domain, and not for its subdomains? That is, I want it to return a fixed IP when resolving ...
12
votes
1
answer
3k
views
SSL Server name mismatch how to bypass ie11
We have an app and the really long story short is that things have to be setup this way in order for the rest of the app not fail.
We have a domain
https://server01/AppNet
In IIS the 443 binding ...
12
votes
2
answers
35k
views
Hosting multiple domains on a single email server with one IP
I have an email server (mail) that currently hosts one domain example1.com. The server is behind NAT and I have split-dns configured on the LAN.
The time has come to host additional domains on the ...
11
votes
2
answers
34k
views
Can host aliases be assigned to deployments in Kubernetes? If so, how?
This article describes how to assign host aliases to pods in kubernetes, is there anyway to do it for a deployment and not for a pod as such?
Any other suggestions to add host entries in kubernetes ...
11
votes
5
answers
34k
views
Two Different Domains & Domain Controllers on Single Network
I'm attempting to determine whether it is possible to have two Active Directory domain controllers running on the same network, within the same subnet, with two separate domains. I do not want these ...
10
votes
2
answers
15k
views
Should our small office have internal DNS servers?
I administer a small office (<50 people). We have always had internal DNS servers in the office. DNS servers are pretty straightforward, but we have run into trouble with them in the past. We ...
10
votes
1
answer
139
views
Internal DNS points to internal server, yet site resolves to public site?
We have a website website.test.company.com and in internal DNS (server 2012 r2) it has 10.0.0.21, which is our server address internally. However when we type in www.website.test.company.com it ...
10
votes
4
answers
18k
views
Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains
I have a TLD with a series of subdomains that are public, say *.example.com. I also have a private server which is used as a SVN repository, which I would like to have available at svn.example.com, ...
10
votes
1
answer
3k
views
Why can DNS server not resolve any domain ending in .io?
I have two windows domain controllers.
10.10.10.10 Primary ( win 2008 r2 )
10.10.10.20 Replica ( win 2012 r2 )
The second one is configured as a replica of the first.
About once per week, the ...
9
votes
3
answers
37k
views
Bind dnsmasq DNS to just localhost (127.0.0.1)
I would like to ask a question about configuring of dnsmasq DNS server. I know about such configuration option as "listen-address". But even if I set this option to "listen-address=127.0.0.1" dnsmasq ...
9
votes
1
answer
3k
views
What are the practical risks of enabling the unsecure DNS updates on Windows?
What are the practical risks of enabling the unsecure DNS updates on Windows?
As far as I found enabling the unsecure DNS updates is a requirement for enabling DHCP Linux clients from registering ...
8
votes
5
answers
10k
views
Resolving host names to their domain name in an internal BIND domain
I'm setting up a domain on my home network for learning purposes, using BIND on CentOS to act as the name server. I've got the name server up and running as type master for my internal domain (...
8
votes
3
answers
3k
views
Enterprise internal URL conventions
developer here... I'd like your IT perspective on this one...
I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
8
votes
1
answer
20k
views
BIND9 forwarders not working. Internal DNS resolves but doesn't forward requests it can't process
I have BIND9 set up with proper recorders for my domain example.com, something.example.com is actually working...
When I have my DHCP server pointing at this DNS server I can get to webmin (https://...
7
votes
1
answer
3k
views
Exposure of hidden-master stealth DNS server on public-facing authoritative slave
In a typical hidden-master DNS network layout, there are basically two components:
Hidden master DNS server, may be behind a NAT or firewall, or be totally exposed
Slave authoritative non-recursive ...
7
votes
5
answers
22k
views
Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?
Here's the setup:
Windows 10 1803 clients
Server 2012R2 RRAS server
Always On VPN device tunnel setup per these instructions, with split tunneling.
Device VPN only has routes to 1 DC/DNS server, and ...
7
votes
1
answer
5k
views
BIND, RPZ and Forwarding priorities
My objective is to block certain domains in bind WITHOUT first looking up their address (this is a small caching bind dns server).
Currently my configuration will forward the request for badhost.com ...
7
votes
1
answer
1k
views
Can a local DNS cache be configured to use stale records when upstream fails?
I'm looking for a proxying/caching DNS Linux server, that is able to serve stale (expired) records if it cannot obtain updates from upstream.
Bonus points, if it can be configured to use stale record ...
7
votes
1
answer
3k
views
Windows Server 2012 member server reports - there is a time or date difference between your computer and the remote computer
PROBLEM
Domain member service reports the following when attempting to RDP from any Windows 10 workstation on the same domain or any Windows client from an external source:
Remote Desktop cannot ...
7
votes
1
answer
13k
views
How should DNS be configured for remote VPN access to a Windows Domain?
Suppose you have a small windows domain configured as follows:
domain name is ad.example.com (as per these guidelines)
DC1 is at 10.10.10.3
DC2 is at 10.10.10.4
DC1 and DC2 are running the AD-...
6
votes
1
answer
23k
views
Ubuntu DNS Lookup Failure
Some one installed and configured ubuntu on a virtual machine hosted on a machine in our network. I've recently noticed that all DNS lookup's fail but i cant find a solution to this. I've tried a ...
6
votes
1
answer
4k
views
In Nginx what is the resolver directive mechanically doing to avoid errors and warnings?
Environment: Nginx, Node.js
I've read the Nginx Docs on Resolver, I understand it's used for DNS and I include it in my config.
However I don't entirely understand what it's doing or when and why I ...
6
votes
1
answer
8k
views
HAProxy doesn't automatically reload DNS
I've installed HAProxy 1.7.5-2 on a Debian Stretch (9) for a blue/green deployment infrastructure.
HAProxy is setup in TCP mode and reloads DNS every 5 seconds but it doesn't.
global
log 127.0.0....
6
votes
2
answers
16k
views
Access libvirt+KVM virtual machines with DNS
I have an Ubuntu Trusty machine running KVM + Libvirt to manage small virtual machines, and using the standard NetworkManager to connect to regular networks.
I want to be able to access the virtual ...
6
votes
2
answers
11k
views
Adding a new DNS server with systemd-resolved
To access other machines on my network by their name, I have to add the following two lines to my /etc/resolv.conf:
search foo.local
nameserver 192.168.X.Y
But any changes I make do not persist ...
5
votes
10
answers
18k
views
Is there a reason to use internal DNS over 8.8.8.8?
I've inherited a LAN where there is really no name resolution being done for local resources... i.e. all users enter IP addresses manually to access printers and network shares. There are no LDAP ...
5
votes
6
answers
7k
views
How to intercept and manipulate DNS queries?
I'm not sure if I worded the question correctly to be honest but basically what I want to do is:
When a user types in something like Expenses in the URL bar of a browser, I want the browser to be ...
5
votes
2
answers
22k
views
IP address used by nslookup and ping is different
I have a web server hosted in the network. It has a domain name registered. However, I also host a DNS server for the LAN. So, when someone wants to access the web server, it would check the DNS ...
5
votes
3
answers
22k
views
How to request/acquire all records from a DNS?
I want to see what nodes exist under a certain domain from within the domain. Short of querying every valid IP address within that domain, is there a way to get all records/map the network?
5
votes
2
answers
405
views
Run local dns-server that forwards dns querys to different dns nameservers
I would like to run my own local dns-server, that forwards only some dns-queries to special dns-servers and all others to the public google dns servers.
The database of the local DNS-Server should ...
5
votes
1
answer
12k
views
Resolve hostname without FQDN
I'm trying to configure Bind for internal LAN usage only (Linux server, Windows clients) and I would like to resolve workstation both by fqdn and shortname.
For example, without DNS server, supposing ...
5
votes
1
answer
1k
views
Valid SSL certificate for domain/subdomain pointed at a private IP address
This is related to a question I saw here where the OP asks whether you can point an A record to a private IP address. So it seems like you can but I have a further question...
If I create the ...
5
votes
3
answers
38k
views
dnsmasq: failed to create listening socket for port 53: Address already in use
I got this error when i done the setup dnsmasq.
ashokkrishna@krishna:~$ sudo dnsmasq
dnsmasq: failed to create listening socket for port 53: Address already in use
ashokkrishna@krishna:~$ netstat -...
5
votes
2
answers
4k
views
NAT Reflection, or Split DNS?
I'm working on a network restructure that has three geographical locations, but will share some services. Two of the locations have workstations, and one has only servers (in a CoLo facility). We will ...
5
votes
2
answers
8k
views
Microsoft DNS: Provide different answers per-src-subnet to same query - do I need full split horizon/brain?
I have a network with two vlans, both of which refer to my AD server(s) for DNS. Some servers on this network are multi-homed.
Lets say we have the two subnets A: 192.168.7.0/24 and B: 192.168.5.0/24....
5
votes
1
answer
2k
views
Is it possible to create a local SRV record in linux?
Is there something like /etc/hosts file for SRV records? I would like my Alpine Linux server to find the value of _xmpp-server._tcp SRV record locally.
5
votes
2
answers
5k
views
How to fully disable Dynamic DNS on Windows Server?
so we're a University campus, and in DNS Manager, all the students phones, tables, etc, are registering their A records in DNS. We don't want them to. Ideally, we'd just have domain joined devices ...
5
votes
1
answer
14k
views
How to use CNAME to external hosts on local DNS Server?
I have a domain mydomain.com and I'm using an external DNS Server to resolve some names like www.mydomain.com and webmail.mydomain.com on Internet.
Now, I need to create a rule, only on my LAN, to ...
5
votes
1
answer
256
views
Decisions about DNS on IPv6
We are rolling out IPv6, and I'm thinking about our DNS strategy. This is not a technical question--it's more of a "best practice" question.
We have Active Directory internally, and the domain ...
5
votes
1
answer
2k
views
IPv6 over Cisco IPSec VPN?
We use a Cisco ASA 5505 as the firewall and IPSec VPN endpoint on our network.
We use split-tunneling to reduce the load on our internet link. In other words, when someone is connected to the VPN ...