Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
Dear, I have a BIND private DNS server which has two forwarders for public resolution. I need to create a private zone "google.com" with just one A record as follow: www.google.com IN A 192.168.0.100 All the local clients will resolve www.google.com to a private address from our company. And fo

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 12:49, Roberto Carna wrote: Dear, I have a BIND private DNS server which has two forwarders for public resolution. I need to create a private zone "google.com" with just one A record as follow: www.google.com IN A 192.168.0.100 All the local clients will resolve www.google.com to a

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Tony Finch
Matus UHLAR - fantomas wrote: > > note that for this kind setup, using dnsmasq with two forwarders and > www.google.com > overriden through /etc/hosts would be easier solution. Or a response policy zone, if you don't want to switch software https://bind9.readthedocs.io/en/v9_16_13/reference.html

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
Dear Matus, maybe I have not understood very well... I can setup a master zone as you said: zone "www.google.com" { type master; file "..."; }; But what are the needed clauses from Bind's named.conf.options file in order to tell "if foo.google.com is not present in the google.com private zone, y

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 13:07, Roberto Carna wrote: Dear Matus, maybe I have not understood very well... I can setup a master zone as you said: zone "www.google.com" { type master; file "..."; }; But what are the needed clauses from Bind's named.conf.options file in order to tell "if foo.google.com is not

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Roberto Carna
But if I want to resolve: foo.google.com that doesn't exist in my google.com private zone, I don't obtain any result. I need to tell my private BIND to forward to 8.8.8.8 all the received *.google.com queries, except www.google.com that is the one locally resolved. Thanks again !!! El miƩ, 31

Re: Local resolution first and then public resolution for "google.com" domain

2021-03-31 Thread Matus UHLAR - fantomas
On 31.03.21 13:57, Roberto Carna wrote: But if I want to resolve: foo.google.com that doesn't exist in my google.com private zone, I don't obtain any result. do NOT define private zone "google.com". configure private zone "www.google.com" that will NOT contain anything other than www.google.c

Re: Local resolution first and then public resolution for "google.com" domain (Roberto Carna)

2021-03-31 Thread Bob McDonald
You could use RPZ for the entry "www.google.com" and then the rest of the domain would resolve from the internet. Regards, Bob ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development o