What is the approach of configuring a internal DNS server to perform name resolution outside of it's scope ? The internal one will handle requests for the local network, but how to configure it to resolve google.com and other internet facing sites ? Creating a forwarder ? Root hints ? what's more secure or how to secure it ? Definitely i don't want my internal DNS to be exposed to the internet.