0

I'm setting up a bind DNS server.

Recursion is set to off and I have two zones defined:

zone "my_local_private_domain" {
    type master;
    file "/etc/named/zones/my_local_private_domain";
};

zone "2.168.192.in-addr.arpa" {
    type master;
    file "/etc/named/zones/db.2.168.192";
};

What I want eventually is for this DNS to forward requests for other zones (for example a DNS resolution to www.google.com) to another server on my local network.

But when I set:

forwarders      { 192.168.2.my_other_DNS; };

It doesn't resolve:

nslookup www.google.com
Server:         192.168.2.193
Address:        192.168.2.193#53

Non-authoritative answer:
*** Can't find www.google.com: No answer

Is it possible to define a zone that forwards a requests to another DNS?And if so, how?

Thanks,

  • Can you show global options from named.conf file? – Mikhail Khirgiy Feb 21 '17 at 16:44
  • "No answer" indicates that no reply was seen, not even one which indicates an error. You need to fix that problem before proceeding any further. The failure to receive replies could be any number of things, including routing or firewall issues. – Andrew B Feb 21 '17 at 19:51
  • 1
    Use dig instead of nslookup for DNS issues. And it is a bad idea to use the same server as authoritative and recursive. Can't you split the two uses? – Patrick Mevzek Feb 21 '17 at 20:29
  • @PatrickMevzek My intention is that a second DNS would do the recursion on behalf of this one. I have forwarders { 192.168.2.my_other_DNS; }; for this purpose. – Elad Kuzy Feb 22 '17 at 7:32
2

See example in page 19 of BIND v9.11 documentation: you need to have a allow-recursion directive with some ACLs targeted to your internal users.

  • So I have to use some sort of a recursion directive to make it work? I am not liking the idea as well... – Elad Kuzy Feb 22 '17 at 7:29
  • 1
    As I said in a previous comment: it is always better to separate the authoritative function from the recursive one. With 2 separate servers (or 2 separate daemons on same servers with 2 IPs). – Patrick Mevzek Feb 22 '17 at 23:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.