Forward First on Master Zone (bypass SOA)

Ben Croswell ben.croswell at gmail.com
Thu Mar 28 20:10:51 UTC 2013


A server will not forward a zone it is also authoritative for.
On Mar 28, 2013 3:33 PM, "Ben-Eliezer, Tal (ITS)" <
Tal.Ben-Eliezer at its.ny.gov> wrote:

> Hello,****
>
> ** **
>
> My organization is evaluating the use of split-view DNS in our environment.
> ****
>
> One of the challenges I’ve yet to overcome in my trials, is the ability to
> minimize the administrative overhead of maintaining two copies of the zone.
> ****
>
> Upon reviewing some of the BIND options, “forward first;” caught my eye.
> Below is the description of this feature I found on Zytrax:****
>
> ** **
>
> *“forward is only relevant in conjunction with a valid forwarders
> statement. If set to 'only' the server will only forward queries, if set to
> 'first' (default) it will send the queries to the forwarder and if not
> answered will attempt to answer the query. This statement may be used in a
> zone, view or a global options clause.”*
>
> * *
>
> If I understand this correctly, BIND should handle a query for
> host.example.com by first passing it through the configured forwarder,
> which should succeed (the record exists on the Internet).****
>
> However, I believe since this server is also authoritative for this domain
> (the internal copy), and the record is not in this “view” of the zone file,
> I receive an NXDOMAIN.****
>
> ** **
>
> I’ve spent hours researching a way to accomplish this without any luck. Is
> there any way to accomplish what I’m trying to do?****
>
> ** **
>
> Thanks,****
>
> ** **
>
> Tal Ben-Eliezer
>
> ****
>
> ** **
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130328/6c0a747e/attachment.html>


More information about the bind-users mailing list