Questions tagged [internal-dns]
DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.
906
questions
-2
votes
0
answers
25
views
Setting up dnsmasq without risk of DNS leaks while tunneling
Context
I have a single machine on the LAN, running dnsmasq server set to listen only on private IP (machine A, not a router).
All other machines on the LAN (including machine A) use dhcpcd with ...
1
vote
3
answers
171
views
DNS client to lookup CNAME records automatically
We've just migrated to a new internal DNS resolver, and discovered a limitation that impacts our ability to lookup specific records.
Our internal (private) authoritative domain is example.net.. We ...
4
votes
5
answers
115k
views
Configure DNS routing in wireguard
Can anyone help to configure routing in wireguard, please?
What i have: Linux server with installed wireguard, unbound dns, pihole, seafile. router keenetic speedster iptables is set to deny 80 port ...
1
vote
2
answers
265
views
let local dns&name server to be reach from internet
I present the context: I have public fixed ip that it's set to my pfsense on the wan; I have internet on my lan; in my lan I have a local DNS server (ubuntu 22.04 with bind9 with ip 10.14.14.10) where ...
6
votes
2
answers
12k
views
Adding a new DNS server with systemd-resolved
To access other machines on my network by their name, I have to add the following two lines to my /etc/resolv.conf:
search foo.local
nameserver 192.168.X.Y
But any changes I make do not persist ...
0
votes
0
answers
15
views
Bind9 custom rules no answer across subnets
I have a few different local subnets and some apps that I'd like to access with a custom DNS server. I have bind9 setup on 10.0.0.0 subnet and all of the devices on that subnet work as expected.
When ...
0
votes
1
answer
69
views
Is there a good way to transfer a DNS Zone from a bind9 server to a new domain with the same name running on freeIPA? [zone to ldif]
I'm working within a company network that has DNS servers but did not have an actual Domain. After installing a FreeIPA server and setting up the domain (same name as the DNS zone in the bind9 DNS ...
0
votes
1
answer
5k
views
How to disable /etc/hosts from resetting after reboot
Using Ubuntu 20.04 LTS on a Raspberry Pi and trying to setup a DNS and DCHP Server on it using DNSMasq
Got to the point where I want to add static DNS results in the /etc/hosts file however when I ...
0
votes
1
answer
153
views
unbound local-zone and local-data: am I doing it right?
I'm playing with unbound to forward DNS queries to an authoritative DNS server, cache them, and also add additionals local informations.
My config is pretty straightforward:
/etc/unbound/unbound.conf:
...
0
votes
2
answers
106
views
Knative On-Premise setup without external IP
I am trying to setup Knative on On-Premise Kubernetes Cluster (without having an external ip).
Kubernetes: v1.28
Knative: v1.13
1 master node and 2 workers
https://knative.dev/docs/install/yaml-...
0
votes
1
answer
48
views
bind9 conditional forwarding not working as expected
Need your experience advice, We have a BIND9 DNS server that operates both privately and publicly for the domain xyz.com. I use the private DNS for certain secure nodes on our local network. I want ...
-2
votes
1
answer
29
views
Local Server connection to internal Mail-Server and SSL
I work in a company that has a pretty strict policy regarding the separation of internal and internet. I got a server for our branch office, I have a static IP for our internal network but no domain. ...
1
vote
1
answer
44
views
How to delegate subdomain to samba DC?
I set up a samba server and I'd like all the clients on my network to use the same DNS server.
Diagram
I have configured the servers (ubuntu/bind9:9.18-22.04_beta) as below.
I don't quite understand ...
4
votes
3
answers
8k
views
How to set custom port for DNS in systemd-resolved
I want to add local DNS server with port 8600 to systemd-resolved for request forwarding.
I've tried to change /etc/systemd/resolved.conf like this
[Resolve]
DNS=127.0.0.1#8600
but this is not counts ...
0
votes
0
answers
154
views
Cannot reach DNS server on vm (guest) through Sophos XG 310
I have a vm running Windows Server 2k19 hosted on ESXi that basically acts as a DC for authentication (AD).
The host is connected to a pSwitch (Dell s4128f-on) that is in turn connected to my Sophos ...
-1
votes
2
answers
168
views
How to resolve "Unable to obtain DNS hostname of Active Directory domain controller with ntdsa object name...."
It starts as a programming problem:
Domain.GetCurrentDomain().DomainControllers
triggers an exception:
Unable to obtain DNS hostname of Active Directory domain controller
with ntdsa object name &...
0
votes
1
answer
71
views
nslookup error : Non-authoritative answer name
i have DNS Server for local user. when PC user nslookup error name server like this
error name
how to solved this error. my DNS running on Ubuntu 22.04
thanks
0
votes
0
answers
32
views
assign appliance.local to appliance.mydomain.com
I have an appliance that uses mdns to handle accessing of iot devices and plugins. when you click on add a plugin it goes to appliance.local to add that plugin to the system. As far as I can tell it ...
3
votes
1
answer
757
views
Kubernetes cluster via kubeadm - CoreDNS buffer size too small / Pods network problems
I am new to deploying on-premise Kubernetes clusters. I managed to deploy one using kubeadm with weave CNI.
Internet connection inside Pods is somewhat sluggish / non-working. I am trying to deploy ...
0
votes
0
answers
102
views
setting root hints in PowerDNS does NOT work
I would like to create a fully DNS hierarchy on my own for a project. Here is my setup:
BIND9 for the Root Nameserver "." (10.0.2.15)
BIND9 Authoritative Nameserver for the domain "...
0
votes
0
answers
61
views
Bypass DNS rebinding for localhost
I am encountering more and more issues with an app I created that binds to 127.0.0.1 on an obscure port. I have a domain name - due to needing an SSL cert - that resolves to 127.0.0.1.
I have this ...
270
votes
12
answers
625k
views
List all DNS records in a domain using dig?
My company runs an internal DNS for mycompany.example
There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory.
...
0
votes
0
answers
127
views
DNS error 4011, unable to write, or update
I encountered one intriguing issue with DNS service on a pair of our domain controllers. Frequently, about every half an hour (sometimes skips or shows only on one), I get the error ID 4011. These ...
0
votes
0
answers
78
views
How to advertise HTTPS RR locally?
Trying to host a HTTP3-only server locally on port 443 and have a local web browser access it.
Tested the HTTP3 server directly with a cli client and that is working 👍
Attempting to use a HTTPS DNS ...
-1
votes
1
answer
47
views
How to make DNS Server return different answers based on network availability? [closed]
I Have a Bind9 docker container acting as the DNS Server of my network, I want this behavior when bind9 is asked about example.com:
If (Network is available):
ask from 8.8.8.8 about example.com
If (...
4
votes
3
answers
2k
views
Can an authorative DNS server be configured to recurse when unable to find record locally?
Hopefully this is possible to do.
The question
Is it possible to configure a DNS server that is authorative for a given domain, to "fallback" and recurse via Forwarders / Root Hints when it cannot ...
1
vote
1
answer
18k
views
Why is DNS Forwarder not resolving/working?
I just installed a Win 2008 Remote DC in one of our sites. For the DNS setting, it's using 127.0.0.1 as it's Primary and 10.1.1.2 (this is our AD/DNS in the Main HQ) as Secondary. We have some ...
9
votes
3
answers
38k
views
Bind dnsmasq DNS to just localhost (127.0.0.1)
I would like to ask a question about configuring of dnsmasq DNS server. I know about such configuration option as "listen-address". But even if I set this option to "listen-address=127.0.0.1" dnsmasq ...
0
votes
2
answers
192
views
Bind9 - Forward specific record to another name server
I have a master zone (example.com) and several A records that belong to that zone (server1.example.com, server2.example.com, etc.). Those records resolve to internally hosted servers. I want to ...
0
votes
2
answers
100
views
How can set the order of name servers in LINUX?
This question is in context with the DNS queries by postfix MTA in Ubuntu OS. The issue I am facing is that I have two name servers one internal and one external. External DNS name server is added in ...
0
votes
0
answers
80
views
How to identify which process made dns query for a particular host?
I can get logs for dns query made to a particular nameserver by auditd, but how can I get process which made dns query for a host.
-1
votes
1
answer
73
views
2 dns for a site + check this dns
I noticed something when I checked the dns of this site
What is this for?
https://intodns.com/ir-seda.ir
Please, someone explain what this is for?
See the photo:
enter image description here
0
votes
0
answers
406
views
Cannot access network resources after connecting to Always On VPN
Background: recently moved offices to a new network that did not have any domain controllers. The network here has a basic WiFi router that has both DNS and DHCP. We moved our DC here that has our ...
-1
votes
1
answer
205
views
Active directory server set up DNS resolution failure or VERY SLOW, can I route external DNS requests the traditional way, before the server existed?
I'm very new to the world of active directory, windows server etc., so I apologise if some of the questions I ask are a bit stupid, but I'll try and explain exactly what I want to do below, and my ...
0
votes
0
answers
230
views
BIND9 on Ubuntu 20 - Cannot configure Zone to work properly
I installed it on Ubunto 20 and configured two zones
Options config file
acl internal {
localhost;
localnets;
192.168.70.0/24;
10.200.157.0/24;
};
options {
...
1
vote
2
answers
1k
views
DNS conditional forwarders for zones on external trusted domain from untrusted domain
I work for an international company and the factory I work for has it's own local domain which has an external trust with the company's main domain so those users can authenticate on our domain as ...
0
votes
0
answers
27
views
How to Forward an authorative zone in BIND between internal and public clients
I have a dns server authorative for my public records and my internal records , I want to forward a zone in my internal dns server so internal clients can access certain records without using the ...
0
votes
0
answers
62
views
Using split DNS when devices default to DNS over HTTPS/TLS?
Some routers don't support hairpinning, and even when they do, it can be inefficient, so split DNS is often proposed as a best practice for hosting services that should be accessible locally and ...
0
votes
0
answers
31
views
GCP private DNS does not work
I am trying to connect my private load balancer IP with a Private DNS record on port 80. But this configuration does not work unless I add my private IP and DNS record to the /etc/hosts file in the ...
0
votes
2
answers
268
views
Private DNS Azure with multiple IPs on A record dont work thah I expected
I hope you can help. Thanks in advance.
I have an Azure Private DNS on Azure that is connected to 4 Vnet in 2 regions. I read that I can put 2 IPs in a single A Record ( Ex. A Record Name sql.midomain....
0
votes
2
answers
2k
views
How do you resolve to both public and private zones in a Split-Horizon DNS (using GCP Cloud DNS)?
We're using GCP and Cloud DNS to manage our domain and I'm trying to solve for these use cases:
Have private records for things like Databases that can only be resolved within the company network (...
0
votes
0
answers
348
views
Windows doesn't failover between internal DNS
We have an Active directory environment with 2 servers - WS2019 being the "main" one holding all FSMO and WS2022 being "reserve", almost all clients are Windows 10. Both are in the ...
0
votes
2
answers
2k
views
AWS route 53 inbound resolver endpoints vs using .2 address in a VPC
I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my ...
-1
votes
4
answers
5k
views
Unable to login when the primary DC is down
In my environment, i got 2 DCs Windows Server 2012. But when the primary is down i cant seams to login or find the path in the network to access another PC.
I have checked and all the DCs has GC and ...
0
votes
0
answers
38
views
Site redirection of recently acquired domains works fine from external network but fails inside internal network
We have recently acquired 04 domains and configured 301 site redirection for those sites to our company site and it works fine from external network. However, the redirection doesn't work from inside ...
1
vote
1
answer
515
views
unbound DNS without recursive
I want to configure the unbound DNS for the domain e.g. domain.com in a way that it only answers for *.domain.com and rest of any query like gmail.com or hotmail.com are refused.
I have following ...
2
votes
2
answers
1k
views
How to get private Elastic-Beanstalk Environment DNS Endpoint?
My setup is the following:
i have a VPC consisting of 3 subnets: public, private with NAT and isolated.
I have an elastic beanstalk (single instance) environment running in the private subnet with Nat ...
0
votes
0
answers
38
views
importing domain from AWS Route S3 to Linode
I want to import a domain registered in AWS:
in the Guides: https://www.linode.com/docs/products/networking/dns-manager/guides/incoming-dns-zone-transfers/
Within your external name server, allow ...
0
votes
0
answers
51
views
ADDC for domain could not be contacted, because there are two domains and DNS for second (new DC) used to be point to old domains DC
I feel like this is a pretty simple question but I'm still little new to DNS. So the company I work for had an old Domain setup on a vlan that just wasn't worth the effort of saving so I created a new ...
-1
votes
1
answer
1k
views
Exchange returned '441 4.4.1
some emails sent from my exchange server 2013 return this error:
Sometimes I check the mail flow and emails that have this error
"returned '441 4.4.1 Error encountered while communicating with ...