May I suggest the book DNS and Bind 5th edition.
Availible from Amazon:
http://www.amazon.com/DNS-BIND-5th-Cricket-Liu/dp/0596100574/ref=sr_1_1?ie=UTF8&qid=1293629633&sr=8-1
All of these things can be done. Do some reading!
Yes you setup forwarding only for the microsoft domain name.
And yes you can setup BIND to not answer questions from the Internet
about your Microsoft domain, but in my opinion that is not necessary.
You do want to disable recursive queries from the Internet and there are
no pointers out on the Internet pointing your microsoft domain to you
BIND server, so noone outside your internal network will know about the
microsoft domain.
The book has examples plus syntax and examples that will cover the rest
of your questions.
Lyle Giese
LCR Computer Services, Inc.
Riccardo Castellani wrote:
>Hopefully the microsoft domain is a name that is not availible on the
>internet, like mymsdomain.local. Then your microsoft server is known as
>domaincontroller.mymsdomain.local.
Of course !
>In that case you would setup a forwarder in BIND for mymsdomain.local
that
>points to the microsoft dns servers.
Ok, but I'd like understanding if:
1- for every query to BIND there is always a forwarding to microsoft dns
servers or if there is only a forwarding for queries containing
'mymsdomain.local' domain ?
2- If I configure BIND how you suggest me, can I not permit Internet
queries
for ''mymsdomain.local' ?
3- Can you show me sample example of forwarding configure file for
specific
domain, please ?
----- Original Message -----
*From:* Lyle Giese <mailto:l...@lcrcomputer.net>
*To:* Riccardo Castellani <mailto:ric.castell...@alice.it>
*Sent:* Tuesday, December 28, 2010 11:12 PM
*Subject:* Re: to route specific dns query to specific dns server
Riccardo Castellani wrote:
I'm using Bind9 for my name server (SERVER EXT) and to give name
resolution for who access from Internet to my domain (e.g. to
access to my Web site or to write to my email addresses).
My domain is example.com:
www.Example.com <http://www.Example.com>
test.h...@example.com <mailto:test.h...@example.com>
This dns server maps only my pubblic addresses.
This server has 2 nics: internal + external ip address.
Some internal servers, as proxy or mail servers, send dns
requests to this dns server to solve names.
I have also internal MS domain (dns server is SERVER INT) which
is different from the other, it's created by Domain Controllers +
AD (activedirectory.com) and it's used to map machines into
internal network.
Now I my email server or proxy server (which are in internal
network) need to synchronize time so they have to use my internal
NTP server; these Linux machines use 'SERVER EXT' in
/etc/resolv.conf, so how I can indicate to send request for
specific internal name (ntp.activedirectory.com) to dns server INT ?
I could insert it inot /etc/hosts but it's not dnssssss service !!!
Hopefully the microsoft domain is a name that is not availible on
the internet, like mymsdomain.local. Then your microsoft server
is known as domaincontroller.mymsdomain.local.
In that case you would setup a forwarder in BIND for
mymsdomain.local that points to the microsoft dns servers. Then
when the linux boxes want domaincontroller.mymsdomain.local, your
Bind name server will ask the microsoft dns servers for the answer.
Lyle Giese
LCR Computer Services, Inc.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
