Getting authoritative replies from a forwarding nameserver

[Kevin Darcy]

Why not configure nameserver A as a slave for all of the affected domains? A
slave for a zone always answers authoritatively; forwarders do not, when they
are answering from cache. If you do that, then you might not even need the
forwarding arrangement.


- Kevin

Dan Roberts wrote:

> I'm slowly migrating services from one machine to another, the first being
> DNS.  My thought was that until the new machine takes the old one's IP
> address, I'd set it up as the primary nameserver then put a forwarding only
> server on the old machine.  My plan seems to have backfired though, because
> people resolving from the forwarding nameserver now get non-authoritative
> replies.
>
> Can someone tell me how I can get authoritative responses out of nameserver
> A as shown below?  Use gwis.com as the example domain.. we have NS records
> for both nameserver A and its slave, but not nameserver B as no one should
> be contacting that server directly.  One thought was to add an NS record for
> nameserver B, but that would entail altering over 300 resource files for our
> virtual host customers.  I'd like to avoid that if possible.
>
> Outside     NAMESERVER A                 NAMESERVER B
> world ====> 209.57.72.3       =======>   209.57.72.7
>            (forwarding first)           (contains all the master rr's)
>
> Thank you for any assistance you can provide, I'm beating my head against
> the wall here.