On 15.11.18 05:29, sethologik wrote:
we have three subnet ( x.x.98.0/24 ; x.x.99.0/24 ; x.x.100.0/24 ) connected
to a firewall wich is connected to WAN ( so the gateway always x.x.x.254 ).

We wanted switch from dnsmasq to BIND9.

The BIND9 and (old) dnsmasq DNS Server is in 99.0/24 net with IP 201(BIND)
and 200(dnsmasq)
...
From net 99.0/24 everything is working fine.
...
however when I try to do so in subnet like 98.0/24 it says he can't reach
this server...

I can dig on website.test.de.webserver01.office.lan.de from ANY subnet and
it gives me an answer like:

;; QUESTION SECTION: ;
website.test.de.webserver01.office.lan.de. IN A

;; ANSWER SECTION:
website.test.de.webserver01.office.lan.de. 86400 IN CNAME 
webserver01.office.lan.de.
website.test.de.webserver01.office.lan.de. 86400 IN A x.x.99.216

;; AUTHORITY SECTION:
office.lan.de. 86400 IN NS dns.office.lan.de.

;; ADDITIONAL SECTION:
dns.office.lan.de. 86400 IN A x.x.99.201

But somehow the explorer can't open up the website anyways.

what site and what is the error?

When I switch back to dnsmasq everything is working.

It is simply configured with wildcards like this:

address=/.webserver01/x.x.99.216

this is not possible with BIND, you must define zhole zone.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Where do you want to go to die?" [Microsoft]
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to