DNS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > DNS
Reload this Page

Internal and External DNS

Discuss Internal and External DNS in the DNS forum on Dev Shed.
Internal and External DNS DNS forum discussing issues, servers, and configurations. The Domain Name System (DNS) is what the Internet uses to translate website names into IP addresses.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Stop making mediocre tutorials.The best tutorials are video! Camtasia Studio makes it easy to create engaging, buzz-building screen videos at any size, in any popular format. Download the free trial!
  #1  
Old April 15th, 2003, 09:39 AM
psylence psylence is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Apr 2003
Location: Baltimore, MD
Posts: 3 psylence User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Unhappy Internal and External DNS
My workplace's external e-mail is handled by an outside company. In order to access the external e-mail we use their DNS server. I am trying to administer Group Policy through our Windows 2000 server. In order to do that, that server has to be the primary DNS server. However, when the Windows 2k server is set to primary we can not access external e-mail. When the external DNS server is set to primary I can not administer Group Policy. Somebody please help.
Reply With Quote
  #2  
Old April 15th, 2003, 01:05 PM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 39 m 55 sec
Reputation Power: 184
Quote:
However, when the Windows 2k server is set to primary we can not access external e-mail.

Setup your name server (the w2k machine) to use forwarders or the root servers. If it is asked for domains it does not know, it will ask other servers then and act as kind of a dns proxy.
__________________
--
Manuel Hirsch - Linux, FreeBSD, programming, administration articles, tutorials and more.
Reply With Quote
  #3  
Old April 16th, 2003, 06:59 AM
psylence psylence is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Apr 2003
Location: Baltimore, MD
Posts: 3 psylence User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
I tried adding forwarders, it did not work. Is it possible for the external DNS server to be blocking the request from my internal server some how? It's either that I'm doing it incorrectly. I'll try it again, thanks for the tip.
Reply With Quote
  #4  
Old April 16th, 2003, 10:47 AM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 39 m 55 sec
Reputation Power: 184
Quote:
Is it possible for the external DNS server to be blocking the request from my internal server some how

possible, yes, but very unlikely. Try other forwarders. You can use nearly any one.

Login to the machine running the DNS server and try to ping the forwarders first. Maybe you canīt reach them because of router/firewall configuration or something similar...
Reply With Quote
  #5  
Old April 16th, 2003, 01:51 PM
psylence psylence is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Apr 2003
Location: Baltimore, MD
Posts: 3 psylence User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
No, I can ping the external DNS server just fine. And when it is set as the primary DNS server I can access my external e-mail, so I don't think that reaching the server is the issue. Question, what is the difference between a forwarder and a forward look-up zone?
Reply With Quote
  #6  
Old July 1st, 2003, 02:08 PM
Vicer Vicer is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Jul 2003
Location: Canada
Posts: 2 Vicer User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
DNS
It is very possible the the owner of the External DNS has his box set as a Primary. Verfiy that the owner is set to allow zone transfers to any server, or adds the ip address of your server for zone transfers.
Setup your server as a primary and do a zone transfer. You now have all of the information his DNS server has and therefore can access mail because you have the resolution to the machine (mail)
You are still a primary and still have control.

You can also use dnsstuff.com or WSPing Pack Pro to do lookups on his system. IE: is his mail server is mail.hisdomain.com do a lookup on the A record and see what machine is responsible for knowing where that machine is. If it is the DNS server you connect to at the owners location then doing a zone transfer will work. If it is a different machine that is responsible do a NS lookup on the owners domain, if the NS server is the same as who is responsible for the mail server then add the owners NS server to your root hints.

Either way if you can not resolve the mail server through your DNS after a zone transfer it will look to root hints, if his NS server is the first in root hints it will check his DNS server and resolve.
Last edited by Vicer : July 1st, 2003 at 02:17 PM.
Reply With Quote
  #7  
Old July 1st, 2003, 02:11 PM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 39 m 55 sec
Reputation Power: 184
Quote:
And when it is set as the primary DNS server...


can you explain this please? did you change the registrar entry or did you enter it as the first dns server in your client config?
Reply With Quote
  #8  
Old July 1st, 2003, 02:11 PM
Vicer Vicer is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
  
Join Date: Jul 2003
Location: Canada
Posts: 2 Vicer User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
A forwarder - forwards requests made to your DNS server to another DNS server. Basically you would have a forwarder on your lan segment so response time is fast, but all requests to resolve go to the forwarder. A forward lookup zone is used when the first DNS server can not resolve the request. It passes the request to the forward lookup zone for resolution.
Reply With Quote
  #9  
Old July 1st, 2003, 02:25 PM
M.Hirsch M.Hirsch is offline
Contributing User
Dev Shed God 1st Plane (5500 - 5999 posts)
  
Join Date: Oct 2000
Location: Back in the real world.
Posts: 5,969 M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level)M.Hirsch User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 1 Month 1 Day 22 h 39 m 55 sec
Reputation Power: 184
Vicer - I donīt think so.

"forward lookup zone" is iirc the opposite of "reverse lookup zone" and thus refers to what we usually abbreviate to "zone files".

About forwarding:
Quote:
from the bind9 manual
1.4.5.1. Forwarding
Even a caching name server does not necessarily perform the complete recursive lookup itself. Instead, it
can forward some or all of the queries that it cannot satisfy from its cache to another caching name
server, commonly referred to as a forwarder.
Reply With Quote
Reply

Viewing: Dev Shed Forums > System Administration > DNS > Internal and External DNS

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway.