Questions tagged [internal-dns]
DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.
1
vote
1answer
18 views
Odd Behavior of DNS forwarding with SRV record resolution
I'm running into a weird problem while setting up a new SAMBA AD DC on my network. I've got the DC itself up and running and checked on the server that I am able to resolve the DNS name of the server, ...
0
votes
0answers
23 views
(BIND9) Domains within certain Zone stop resolving randomly / intermittently
I've been stuck for a while with an error related to bind9 and particular domains within a zone. Sometimes the resolution of one or more random domains within the zone ("errorzone", let's say) stops ...
1
vote
0answers
37 views
Dynamic DNS, basic configuration not working
I'm trying to implement DDns, where DHCP daemon updates dns records instead of myself. From what I understand, it should work. But it doesn't. I would be very grateful, if somebody points out my ...
0
votes
2answers
36 views
Bind - Resolve two domains with a single server
I need a bit of help with BIND (Centos 7.5)
Bit of a back story:
We are running two domains on the network. One called company.domain.com and one called comp.domain.com
company.domain.com has ...
0
votes
0answers
29 views
DNS dynamic updates stopped working
Recently I noticed dynamic DNS updates weren't working on newly joined workstations. Not sure when it stopped. If I run IPCONFIG /REGISTERDNS on a workstation, I get one of the two errors below ...
2
votes
1answer
38 views
How to identify the server providing a DNS response?
TL;DR: Where, in a nslookup www.somedomain.com -debug will I find the name/IP of the server(s) which reply to the chain of queries?
Details:
I have a setup (Windows 10 machine)
which is connected ...
0
votes
0answers
20 views
Cached DNS slower than Global DNS Servers
I have a bind9 DNS server that resolves names of some of the machines on the network and also caches DNS queries. It uses google's 8.8.8.8 nameserver when the DNS entry isn't cached. I used namebench ...
1
vote
0answers
41 views
Setup DNS Forward Server to forward only specific domains
I want to setup DNS Forwarding Server to forward DNS resolution requests for only specific zones.
I am using the following config.
acl "trusted" {
localhost;
10.x.x.x/24;
};
options ...
2
votes
1answer
29 views
Valid SSL certificate for domain/subdomain pointed at a private IP address
This is related to a question I saw here where the OP asks whether you can point an A record to a private IP address. So it seems like you can but I have a further question...
If I create the ...
1
vote
0answers
45 views
Unbound config to forward unknow local subdomain name
I am currently on a local aera network where no loop-back is allowed meaning that I cannot reach my public IP address from the local network.
Several services need to be migrated in my local area ...
0
votes
1answer
27 views
Resolve specific Domain query using View in BIND9 (Forward)
I am trying to setup a whitelisted domain forwarder in my bind9 but it wasn't successfully accomplish maybe due to the configuration that I applied.
A couple months ago, I did setup the same ...
1
vote
2answers
227 views
Can BIND setup with only A names and fully qualified host names work properly?
I recently came across a zone file for BIND which used only Address records with fully qualified domain names for each IP.
Example snippet:
subdomain1.example.com. IN A 192.168.1.10
subdomain2....
0
votes
1answer
31 views
Different authorize servers for DNS “A” record and “MX” record
Can we use different authorize server to host A and MX record.
Let I want that my internal DNS server should be authorize for "A" records only and when an email is sent and there is need for MX record ...
-1
votes
1answer
43 views
DHCP: Advertise DNS Server with port (not 53)
In my network I have a small docker swarm running several apps.
Latest I tried to setup two new services offering DHCP with ispcpd and DNS with unbound to the network.
Master of the swarm is a new ...
6
votes
1answer
254 views
Exposure of hidden-master stealth DNS server on public-facing authoritative slave
In a typical hidden-master DNS network layout, there are basically two components:
Hidden master DNS server, may be behind a NAT or firewall, or be totally exposed
Slave authoritative non-recursive ...
0
votes
1answer
41 views
HAProxy doesn't automatically reload DNS
I've installed HAProxy 1.7.5-2 on a Debian Stretch (9) for a blue/green deployment infrastructure.
HAProxy is setup in TCP mode and reloads DNS every 5 seconds but it doesn't.
global
log 127.0.0....
1
vote
1answer
89 views
dnsmasq: one domain, half private, half public?
Our internal office network has the same top-level domain as our company online presence, e.g. ourdomain.com.
For the outside world, any public hosts (eg. blog.ourdomain.com, download.ourdomain.com, ...
5
votes
1answer
115 views
Large AXFR through dnsmasq causes dig to hang with partial results
I'm attempting to set up dnsmasq as a local cache for consul. While this seems to work fine for normal digs, dnsmasq seems to only allow partial zone transfers.
My resolv.conf:
search x.domain.com y....
0
votes
1answer
32 views
Samba Secondary DC,No DNS Forwarding
I'm new to Linux and testing Samba AD DC.
I've set up 2 DCs.
DC1 is able to resolve google.com, DC2 is not.
nslookup google.com 192.168.0.100
Server: 192.168.0.100
Address: ...
1
vote
0answers
134 views
Dynamic DNS client records not being updated correctly
Our network is running Windows and macOS clients all of which are joined to Active Directory. The Macs are all running Windows via Bootcamp. We were having issues which were being caused by our macOS ...
0
votes
1answer
60 views
All DCs fail DNS:RReg test, Reports SRV Records Missing on PDC - They are present
Background
We are currently in the process of doing several Domain Controller upgrades. Before I started here a previous Admin had started the process of moving our DCs from 2008 R2 Standard to 2008 ...
0
votes
3answers
28 views
Using OpenNIC but can not connect to local domains
I am using the service OpenNIC for my DNS. This works fine. However, when using OpenNIC I am unable to connect to local domains.
Example:
$ ssh example.com
Works!
$ ssh my-computer.local
No ...
1
vote
1answer
105 views
Should I manage SRV records for my Windows Server DC manually?
I have Microsoft AD Domain with multiple geographical sites.
All sites are interconnected by VPN.
All sites have 2 Domain Controllers running Windows Server 2012 R2.
I was reviewing the automated ...
1
vote
0answers
57 views
DNS-RPZ use for nonexistent addresses
I'm trying to find a scheme where I can use a generic UI app to automatically access some local IoT devices I'm making, no matter the domain in which they are installed.
Yes, I know IoT is just an ...
0
votes
1answer
63 views
Microsoft DNS behaving strangely
I'm having this peculiar issue with Microsoft DNS.
Basically, we have domain.com that's a split horizon setup (external public DNS and internal DNS are both authoritative for separate zones), don't ...
0
votes
0answers
25 views
Split horizon with automatic forwarding
any a idea how i can setup an Split Horizon Bind DNS with automatic forwarding to the external View?
my current setup is this:
/etc/named.conf file
include "/etc/myrndc.key";
controls {
...
-2
votes
1answer
278 views
How to connect to local servers by hostname? [closed]
I have a Ubuntu server and Centos server installed on VMware on my Windows 10 PC for testing. I don't have any domain names registered and using cable internet so my IP is dynamic.
Centos server's /...
-1
votes
2answers
55 views
Resolv to CNAME not to A record
At the data center of the university I work, we have a DNS system, that we use for registering the names of our servers and the addresses of the services that are meant for internal use only.
Usually,...
0
votes
1answer
287 views
Split DNS and internal port forwarding
I have a pfSense firewall running in a pretty standard configuration, 1 WAN, 1 LAN. On both sides of the pfsense I'd like to make available a service via DNS name, lets say "service.domain.com".
For ...
0
votes
1answer
188 views
Kubernetes Pod DNS Resolution
Currently able to resolve all services to IP addresses and telnet and ping them. Unable to resolve pods to IP addresses. Though can lookup pod IP addresses with kubectl and telnet and ping them.
How ...
0
votes
1answer
38 views
Redirect email to different domain
Is it possible to use the LAN DNS to redirect an email to a different domain?
i.e. if I want to send emails to the domain name this.longdomainname.co.uk on a regular basis I could setup my DNS so ...
4
votes
4answers
947 views
Windows 10 Always On VPN, Split DNS, NRPT, and how to configure which DNS server is used?
Here's the setup:
Windows 10 1803 clients
Server 2012R2 RRAS server
Always On VPN device tunnel setup per these instructions, with split tunneling.
Device VPN only has routes to 1 DC/DNS server, and ...
0
votes
1answer
122 views
How to resolve dns in multiple name servers?
resolv.conf
domain example.com
nameserver 192.168.122.54
nameserver 192.168.124.44
Take this as the sample resolv.conf. The scenario is that the DNS tries to resolve in the first name ...
0
votes
0answers
29 views
Mac administration - local reposado server for internal & external clients
I'm a relatively new Mac admin at a small (but growing) startup and I'm trying to get a few basics set up.
The company has three physical sites and each site has a mix of about 5-10 iMacs and MBAs. ...
0
votes
0answers
87 views
NDJBDNS setup on Centos - Dig @127.0.0.1 times out
I'm in the process of replacing an old Gentoo DNS setup (running DJBDNS) with a CentOS 7 one, and have decided to go with NDJBDNS since it appears to be the most modern implementation of TinyDNS.
...
2
votes
3answers
260 views
DNS Entry to Re-Direct WU to WSUS for non Domain Devices
A little background, I'm not a systems administrator but overheard ours discussing this very issue and wanted to do some looking into it myself.
We run an internal network with numerous VMs (and some ...
0
votes
1answer
130 views
DNS record with same name for A and NS record types
I am not sure of this but was trying to understand if the two DNS records of the record of 'A' and 'NS' type can have the same in the domain?
like:
A.m.b.example NS -> [ NS servers ]
A.m.b....
-1
votes
2answers
162 views
Running custom DNS on EC2 instances
I am trying to design a Enterprise Hybrid DNS architecture, similar to this blog article:
https://medium.com/statuscode/hybrid-dns-for-the-enterprise-in-aws-5ba5a049bcb1
In summary there is an on-...
1
vote
1answer
228 views
Samba DC with additional DNS server (not same server)
I need to add a Samba DC to an existing network AND existing DNS Server.
My environment:
DNS Server with Bind9 (9.10)
new Samba DC installed with samba-tool and internal DNS Server
a bunch of servers ...
0
votes
0answers
36 views
Running docker on a different host
I'm working on a docker image for the company web development. I have docker completely configured and running successfully.
As I want to create DNS for the containers running on docker, I'd like to ...
0
votes
1answer
53 views
Configure DNS policy to only handle internal zone for one client
I have an AD domain running on my network with a single DC
All my clients, domain joined or otherwise, use this DC for DNS
The DC has a forwarder set of 1.1.1.1 for external queries
I have a single ...
0
votes
1answer
111 views
Inconsistent glue for name server
I'm getting the error "Inconsistent glue for name server" for our domain webhost.pro on the third name server.
Not sure why, the third name server resolves correctly and has the correct DNS details.
...
-1
votes
1answer
55 views
Router DNS setup when using Server Essentials
I have Server Essentials 2016. Each client that I connect gets their DNS set to the SE2016 box during connection. My router has it's DNS set to the ISP. I have some weird issues with the internet just ...
2
votes
1answer
125 views
DNS Broken After Enabling Scavenging
Last Friday, I turned on DNS Scavenging on one of my domain controllers. This was done with the goal of removing old unused A records from decommissioned computers. However it turned out that our DHCP(...
1
vote
0answers
53 views
Bind DNS Active Directory + Subnet
recently I moved from Windows DNS server to Bind which worked well so far.
The only thing which I am "missing" is "subnet answering" from Windows DNS.
E.g. I have one server with three NICs - each in ...
0
votes
0answers
128 views
Configure DNS servers on multi-homed EC2 instance running Windows 2016 server
I need help configuring DNS servers for a multi-homed EC2 instance running Windows 2016 server. This instance has 2 network interfaces attached to it, eth0 and eth1. I have setup routing policies to ...
1
vote
1answer
79 views
Windows Server 2012 DNS: Bizarre TIMEOUT failure mode for A-type queries back to own interface
I have an Active Directory Windows 2012 (R2 Standard, 6.3.9600) server that has been working for years with no issues. All of a sudden, I have the following failure mode. It should be obvious from the ...
-1
votes
2answers
73 views
Setup Internal DNS Host
I am having a domain (say, example.com) and a Static IP(say 192.168.1.200) from my ISP. The A record of domain points to that Static IP. I have used port forwarding in router to route all requests to ...
0
votes
1answer
176 views
dnsmasq list-servers “precedence”
I have a device, in a LAN, behind a router, that runs a linux and need to provide it with an internal DNS server, to resolve names for its own internal applications (it's OpenWRT-based).
The reason ...
1
vote
1answer
103 views
GlobalNames Zone on Bind DNS server
Is it possible to set up a GlobalNames zone using Bind DNS?
I'd like to be able to create an internal zone that responds to single lable names ie. http://intranet , or http://nas , rather than using ...
