Questions tagged [internal-dns]

DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.

Filter by
Sorted by
Tagged with
268 votes
12 answers
620k views

List all DNS records in a domain using dig?

My company runs an internal DNS for mycompany.example There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory. ...
Runcible's user avatar
  • 3,255
33 votes
4 answers
57k views

Difference between /etc/hosts and /etc/resolv.conf

What is the difference between /etc/hosts and /etc/resolv.conf? Also, is there a good documentation that explain all these configuration files. Thank you. Bala
Boolean's user avatar
  • 543
28 votes
5 answers
288k views

How do I determine what my DHCP server is?

I have a sad network left behind by some careless administrators - I am in the process of figuring out exactly what services are running where, not excluding the possibility that some services are ...
Manca Weeks's user avatar
23 votes
13 answers
48k views

Using .local for internal websites [duplicate]

Is it okay to use app.mycoolname.local for URLs that are private / internal? We have several applications that are web based, but they are private apps and are not exposed to the public. We have ...
user avatar
19 votes
2 answers
986 views

Multiple reverse DNS record internal DNS

A user was having trouble connecting to the internet, some sites worked some sites did not. I do not think it has anything to do with networking gear, but just in case. 2 firewall, Palo-Alto 4 ...
Anthony Fornito's user avatar
17 votes
4 answers
56k views

DNS A record pointing to private IP address [duplicate]

I own a domain. I will call it example.com. I want to set up a local BIND server on my private network. I have a box with the private IP address of 192.168.2.13 I would like to have this box named ...
Ryan's user avatar
  • 332
15 votes
1 answer
15k views

What is the point of the zones.rfc1918 file for Bind9?

Using an Ubuntu 10.04 LTS server in a standalone environment and trying to use views to serve two different subnets of clients. Getting errors regarding the zones.rfc1918 file, so I'd like to know ...
romandas's user avatar
  • 3,362
15 votes
5 answers
65k views

Querying DNS for CNAMEs for a server

Is there a way to query our internal DNS entries to discover all the CNAME entries that point to a particular server? Edit: We're a Windows environment, Server 2003.
PhilPursglove's user avatar
14 votes
2 answers
2k views

Should engineering have its own DNS zone, delegate, or subdomain?

We have our organization's primary domain (with AD) example.com. In the past, previous admins have created several other zones - such as dmn.com, lab.example.com, dmn-geo.com etc - as well as ...
Thomas's user avatar
  • 880
13 votes
3 answers
18k views

unbound/nsd returning SERVFAIL resolving local LAN DNS. nsd alone works fine

I've been using unbound as a local recursive DNS server. Just added nsd to set up local LAN DNS. nsd is listening on port 53530 and that works fine: $ dig @127.0.0.1 data2.datanet.home -p 53530 ; &...
Micah Yoder's user avatar
12 votes
4 answers
7k views

Don't automatically include all subdomains in DNSMasq address

It is possible to configure DNSMasq such that it returns a fixed IP address only for a request for that exact domain, and not for its subdomains? That is, I want it to return a fixed IP when resolving ...
Michael Mrozek's user avatar
12 votes
1 answer
3k views

SSL Server name mismatch how to bypass ie11

We have an app and the really long story short is that things have to be setup this way in order for the rest of the app not fail. We have a domain https://server01/AppNet In IIS the 443 binding ...
Anthony Fornito's user avatar
12 votes
2 answers
35k views

Hosting multiple domains on a single email server with one IP

I have an email server (mail) that currently hosts one domain example1.com. The server is behind NAT and I have split-dns configured on the LAN. The time has come to host additional domains on the ...
joshu's user avatar
  • 811
11 votes
2 answers
34k views

Can host aliases be assigned to deployments in Kubernetes? If so, how?

This article describes how to assign host aliases to pods in kubernetes, is there anyway to do it for a deployment and not for a pod as such? Any other suggestions to add host entries in kubernetes ...
Ulukai's user avatar
  • 919
11 votes
5 answers
34k views

Two Different Domains & Domain Controllers on Single Network

I'm attempting to determine whether it is possible to have two Active Directory domain controllers running on the same network, within the same subnet, with two separate domains. I do not want these ...
BSchlinker's user avatar
10 votes
2 answers
15k views

Should our small office have internal DNS servers?

I administer a small office (<50 people). We have always had internal DNS servers in the office. DNS servers are pretty straightforward, but we have run into trouble with them in the past. We ...
Aaron R.'s user avatar
  • 467
10 votes
1 answer
139 views

Internal DNS points to internal server, yet site resolves to public site?

We have a website website.test.company.com and in internal DNS (server 2012 r2) it has 10.0.0.21, which is our server address internally. However when we type in www.website.test.company.com it ...
Randy Pratt's user avatar
10 votes
4 answers
18k views

Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains

I have a TLD with a series of subdomains that are public, say *.example.com. I also have a private server which is used as a SVN repository, which I would like to have available at svn.example.com, ...
Adam Sharp's user avatar
10 votes
1 answer
3k views

Why can DNS server not resolve any domain ending in .io?

I have two windows domain controllers. 10.10.10.10 Primary ( win 2008 r2 ) 10.10.10.20 Replica ( win 2012 r2 ) The second one is configured as a replica of the first. About once per week, the ...
spuder's user avatar
  • 1,745
9 votes
3 answers
37k views

Bind dnsmasq DNS to just localhost (127.0.0.1)

I would like to ask a question about configuring of dnsmasq DNS server. I know about such configuration option as "listen-address". But even if I set this option to "listen-address=127.0.0.1" dnsmasq ...
D.K.'s user avatar
  • 101
9 votes
1 answer
3k views

What are the practical risks of enabling the unsecure DNS updates on Windows?

What are the practical risks of enabling the unsecure DNS updates on Windows? As far as I found enabling the unsecure DNS updates is a requirement for enabling DHCP Linux clients from registering ...
sorin's user avatar
  • 8,216
8 votes
5 answers
10k views

Resolving host names to their domain name in an internal BIND domain

I'm setting up a domain on my home network for learning purposes, using BIND on CentOS to act as the name server. I've got the name server up and running as type master for my internal domain (...
Adam Plumb's user avatar
8 votes
3 answers
3k views

Enterprise internal URL conventions

developer here... I'd like your IT perspective on this one... I'm building a new internal web app for my company, and starting to think about how it will be deployed. Many of the existing web apps ...
Ben Brandt's user avatar
8 votes
1 answer
20k views

BIND9 forwarders not working. Internal DNS resolves but doesn't forward requests it can't process

I have BIND9 set up with proper recorders for my domain example.com, something.example.com is actually working... When I have my DHCP server pointing at this DNS server I can get to webmin (https://...
user29600's user avatar
  • 429
7 votes
1 answer
3k views

Exposure of hidden-master stealth DNS server on public-facing authoritative slave

In a typical hidden-master DNS network layout, there are basically two components: Hidden master DNS server, may be behind a NAT or firewall, or be totally exposed Slave authoritative non-recursive ...
John Greene's user avatar
7 votes
5 answers
22k views

Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?

Here's the setup: Windows 10 1803 clients Server 2012R2 RRAS server Always On VPN device tunnel setup per these instructions, with split tunneling. Device VPN only has routes to 1 DC/DNS server, and ...
Grant's user avatar
  • 18k
7 votes
1 answer
5k views

BIND, RPZ and Forwarding priorities

My objective is to block certain domains in bind WITHOUT first looking up their address (this is a small caching bind dns server). Currently my configuration will forward the request for badhost.com ...
Jon T's user avatar
  • 73
7 votes
1 answer
1k views

Can a local DNS cache be configured to use stale records when upstream fails?

I'm looking for a proxying/caching DNS Linux server, that is able to serve stale (expired) records if it cannot obtain updates from upstream. Bonus points, if it can be configured to use stale record ...
Earwin's user avatar
  • 173
7 votes
1 answer
3k views

Windows Server 2012 member server reports - there is a time or date difference between your computer and the remote computer

PROBLEM Domain member service reports the following when attempting to RDP from any Windows 10 workstation on the same domain or any Windows client from an external source: Remote Desktop cannot ...
scott_lotus's user avatar
  • 1,089
7 votes
1 answer
13k views

How should DNS be configured for remote VPN access to a Windows Domain?

Suppose you have a small windows domain configured as follows: domain name is ad.example.com (as per these guidelines) DC1 is at 10.10.10.3 DC2 is at 10.10.10.4 DC1 and DC2 are running the AD-...
alx9r's user avatar
  • 1,653
6 votes
1 answer
23k views

Ubuntu DNS Lookup Failure

Some one installed and configured ubuntu on a virtual machine hosted on a machine in our network. I've recently noticed that all DNS lookup's fail but i cant find a solution to this. I've tried a ...
Lee's user avatar
  • 183
6 votes
1 answer
4k views

In Nginx what is the resolver directive mechanically doing to avoid errors and warnings?

Environment: Nginx, Node.js I've read the Nginx Docs on Resolver, I understand it's used for DNS and I include it in my config. However I don't entirely understand what it's doing or when and why I ...
stackedAndOverflowed's user avatar
6 votes
1 answer
8k views

HAProxy doesn't automatically reload DNS

I've installed HAProxy 1.7.5-2 on a Debian Stretch (9) for a blue/green deployment infrastructure. HAProxy is setup in TCP mode and reloads DNS every 5 seconds but it doesn't. global log 127.0.0....
Kaymaz's user avatar
  • 243
6 votes
2 answers
16k views

Access libvirt+KVM virtual machines with DNS

I have an Ubuntu Trusty machine running KVM + Libvirt to manage small virtual machines, and using the standard NetworkManager to connect to regular networks. I want to be able to access the virtual ...
Tim Jones's user avatar
6 votes
2 answers
11k views

Adding a new DNS server with systemd-resolved

To access other machines on my network by their name, I have to add the following two lines to my /etc/resolv.conf: search foo.local nameserver 192.168.X.Y But any changes I make do not persist ...
iomartin's user avatar
  • 161
5 votes
10 answers
18k views

Is there a reason to use internal DNS over 8.8.8.8?

I've inherited a LAN where there is really no name resolution being done for local resources... i.e. all users enter IP addresses manually to access printers and network shares. There are no LDAP ...
CaseyIT's user avatar
  • 427
5 votes
6 answers
7k views

How to intercept and manipulate DNS queries?

I'm not sure if I worded the question correctly to be honest but basically what I want to do is: When a user types in something like Expenses in the URL bar of a browser, I want the browser to be ...
emtunc's user avatar
  • 812
5 votes
2 answers
22k views

IP address used by nslookup and ping is different

I have a web server hosted in the network. It has a domain name registered. However, I also host a DNS server for the LAN. So, when someone wants to access the web server, it would check the DNS ...
ht2's user avatar
  • 61
5 votes
3 answers
22k views

How to request/acquire all records from a DNS?

I want to see what nodes exist under a certain domain from within the domain. Short of querying every valid IP address within that domain, is there a way to get all records/map the network?
Ritwik Bose's user avatar
5 votes
2 answers
405 views

Run local dns-server that forwards dns querys to different dns nameservers

I would like to run my own local dns-server, that forwards only some dns-queries to special dns-servers and all others to the public google dns servers. The database of the local DNS-Server should ...
user1861174's user avatar
5 votes
1 answer
12k views

Resolve hostname without FQDN

I'm trying to configure Bind for internal LAN usage only (Linux server, Windows clients) and I would like to resolve workstation both by fqdn and shortname. For example, without DNS server, supposing ...
Eddie C.'s user avatar
  • 547
5 votes
1 answer
1k views

Valid SSL certificate for domain/subdomain pointed at a private IP address

This is related to a question I saw here where the OP asks whether you can point an A record to a private IP address. So it seems like you can but I have a further question... If I create the ...
wingyip's user avatar
  • 161
5 votes
3 answers
38k views

dnsmasq: failed to create listening socket for port 53: Address already in use

I got this error when i done the setup dnsmasq. ashokkrishna@krishna:~$ sudo dnsmasq dnsmasq: failed to create listening socket for port 53: Address already in use ashokkrishna@krishna:~$ netstat -...
ashok's user avatar
  • 229
5 votes
2 answers
4k views

NAT Reflection, or Split DNS?

I'm working on a network restructure that has three geographical locations, but will share some services. Two of the locations have workstations, and one has only servers (in a CoLo facility). We will ...
Bryan Agee's user avatar
  • 1,219
5 votes
2 answers
8k views

Microsoft DNS: Provide different answers per-src-subnet to same query - do I need full split horizon/brain?

I have a network with two vlans, both of which refer to my AD server(s) for DNS. Some servers on this network are multi-homed. Lets say we have the two subnets A: 192.168.7.0/24 and B: 192.168.5.0/24....
Tom Newton's user avatar
  • 4,171
5 votes
1 answer
2k views

Is it possible to create a local SRV record in linux?

Is there something like /etc/hosts file for SRV records? I would like my Alpine Linux server to find the value of _xmpp-server._tcp SRV record locally.
Navid777's user avatar
  • 153
5 votes
2 answers
5k views

How to fully disable Dynamic DNS on Windows Server?

so we're a University campus, and in DNS Manager, all the students phones, tables, etc, are registering their A records in DNS. We don't want them to. Ideally, we'd just have domain joined devices ...
amoreno's user avatar
  • 91
5 votes
1 answer
14k views

How to use CNAME to external hosts on local DNS Server?

I have a domain mydomain.com and I'm using an external DNS Server to resolve some names like www.mydomain.com and webmail.mydomain.com on Internet. Now, I need to create a rule, only on my LAN, to ...
Ederson's user avatar
  • 575
5 votes
1 answer
256 views

Decisions about DNS on IPv6

We are rolling out IPv6, and I'm thinking about our DNS strategy. This is not a technical question--it's more of a "best practice" question. We have Active Directory internally, and the domain ...
theglossy1's user avatar
5 votes
1 answer
2k views

IPv6 over Cisco IPSec VPN?

We use a Cisco ASA 5505 as the firewall and IPSec VPN endpoint on our network. We use split-tunneling to reduce the load on our internet link. In other words, when someone is connected to the VPN ...
Martijn Heemels's user avatar

1
2 3 4 5
19