On 01.09.2011 19:01, CT wrote: > so did you end up setting up a slave zone (for the internal AD DNS) on > your public DNS server ? No, for now I just left the AD DNS (Microsoft DNS) instead of BIND. I didn't have time to move all DNS servers to BIND and make them primary/slave for locale zone.