Dual DNS server help
Gary Foulds
gary.foulds at cplaromas.com
Fri May 12 09:47:13 UTC 2000
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
All
Can anyone help me with a small problem.
I am in the process of installing a new DNS for our company. this DNS is to
be a dual system. using an Internal and External servers.
I have managed to get this to work in a chroot environment and both servers
are making the correct responses to queries, i.e. the external DNS looks to
the Internet to resolve IP's and the Internal DNS resolves internal requests
and passes external requests to the External server, this part is working
correctly.
What I am trying to do is this.
External Server www.somedomain.com. IN A 192.168.2.6
Internal Server int-ns.somedomain.com IN A 10.5.3.1
if I do a query from the Internal server for int-ns.somedomain.com it
returns the correct address 19,5,3,1 but if I query www.somedomain.com the
internal server does not pass this to the external server, it just returns
unknown address. both domains are the same name, and I was under the
impression, rightly or wrongly that if the internal DNS did not find it, it
would ask the external DNS but this is not what is happening
I have included both named.conf files in this for clarity, I think that I
have missed a line out somewhere in the internal named.conf file
Help is appreciated.
Internal named.conf (names changed to protect the innocent)
#======================================================
# named.conf for dbfiles_internal directory.
#
# NOTE: Comments in this file begin with a # symbol.
#
# NOTE: Remember we're chrooted. Don't break the paths
# below by forgetting that.
#======================================================
options {
directory "/zonefiles_internal";
pid-file "/zonefiles_internal/internal.pid";
named-xfer "/sbin/named-xfer";
#
# specify the internal IP address of this box
listen-on { 10.5.3.1; };
#
# specify the external IP address of this box
forwarders { 192.168.2.6; };
#
# only allow queries fromthis source.
allow-query { 10.0.0/8; };
};
controls{
unix "/zonefiles_internal/ndc_internal"
perm 0600
owner 0
group 0;
};
zone "somedomain.com" in {
type master;
file "com/somedomain.zone";
};
#zone "1.168.192.in-addr.arpa" in {
# type master;
# file "db.192.168.1";
#};
zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};
zone "." in {
type hint;
file "root.hint";
};
External named.conf
#======================================================
# named.conf for dbfiles_external directory.
#
# NOTE: Comments in this file begin with a # symbol.
#
# NOTE: Remember we're chrooted. Don't break the paths
# below by forgetting that.
#======================================================
options {
directory "/zonefiles_external";
pid-file "/zonefiles_external/external.pid";
named-xfer "/sbin/named-xfer";
#
# depending on how/if you packet filter, you may
# want this. AFAIK, it doesn't hurt.
query-source address * port 53;
#
# global options set to only allow queries from
# us. We explicitly allow our served zones to be
# queried on a per-zone basis later in this file.
allow-query { 10.5.3.1; 192.168.2/24; };
listen-on { 192.168.2.6; 127.0.0.1; };
};
controls{
unix "/zonefiles_external/ndc_external"
perm 0600
owner 0
group 0;
};
zone "somedomain.com" in {
type master;
file "com/somedomain.zone";
allow-query { any; };
# allow-transfer { 172.16.12.10; 10.0.0.1; };
allow-transfer { 192.168.2/27 10.5.3.1; };
};
#zone "10.16.172.in-addr.arpa" in {
# type master;
# allow-query { any; };
# file "db.172.16.10";
# allow-transfer { 172.16.12.10; 10.0.0.1; };
#};
zone "0.0.127.in-addr.arpa" in {
type master;
allow-query { any; };
file "db.127.0.0";
};
zone "." in {
type hint;
file "root.hint";
};
Directory structure is similar to this one
ls -lR /usr/local/bind/dbfiles_*
/usr/local/bind/dbfiles_external:
total 18
-rw-r--r-- 1 root root 678 Nov 14 22:28 db.127.0.0
-rw-r--r-- 1 root root 690 Nov 14 22:29 db.172.16.10
-rw-r--r-- 1 root root 2769 Aug 1 12:55 db.cache
-rw-r--r-- 1 root root 1508 Nov 14 22:46 db.somedomain.com
-rw-r--r-- 1 root root 1425 Nov 19 22:29 named.conf
/usr/local/bind/dbfiles_internal:
total 18
-rw-r--r-- 1 root root 669 Nov 14 22:30 db.127.0.0
-rw-r--r-- 1 root root 800 Nov 14 22:30 db.192.168.1
-rw-r--r-- 1 root root 2769 Aug 1 12:54 db.cache
-rw-r--r-- 1 root root 1062 Nov 14 22:31 db.somedomain.com
-rw-r--r-- 1 root root 1004 Nov 19 22:38 named.conf
Gary Foulds
Group IT Manager
CPL Aromas Plc
Tel: +44 127 971 7229
Mobile: +44 794 121 5616
-- Binary/unsupported file stripped by Listar --
-- Type: image/jpeg
-- File: Notebook.jpg
More information about the bind-users
mailing list