just getting started here. I tried searching most relevant results and haven't quite found what I'm looking for.
First off, I am using an Active Directory that I created for a private game project and was going to use it more than I have been by integrating it into the tool systems my developers use.
As such, I decided to place my DNS zones within Active Directory so they could manage and replicate. Obviously, I do not wish to expose my domain controllers to the internet since it is a bad practice. I do however want to be able to use this service if it is possible.
The problem is, when I run checks on some of our public DNS zones, they resolve from two of my other servers which are secondary copies of the AD Integrated DNS. However, my SOA and Nameserver checks fail because the domain controllers are inaccessible to the public, and they are of course listed as Nameservers and the SOA for those zones since they're ADI.
My question is essentially this, is there a way I can do what I'm trying to do which is host these zones on my domain controllers and have the secondary copies available and still satisfy the checks out to the public in a safe manner? I'm trying to figure out if my only option will be relocating these DNS zones to an external source from my virtual host that is publicly accessible at all times.