Questions tagged [internal-dns]

DNS that is visible within your corporate network and VPN, but which is not visible on the public Internet.

886 questions
0
votes
0 answers

Forward subdomain to another dns-server with dnsmasq

I have dnsmasq as main dns-server in localnet(192.168.0.14). It's serve local domain 'example'. Also I have another dns-server(bind9 - 192.168.222.67) that serve domain 'virt.example' Here part of dnsmasq…
cppmm
  • 1
0
votes
0 answers

How do I change which interface gateway pfsense resolves to?

I've recently extended my network from one flat LAN to a couple interfaces using additional physical ports on my router and VLANs. I've kept the old interface up while I'm migrating and for testing and renamed it Legacy. The legacy interface uses a…
iPreston
  • 1
  • 1
0
votes
1 answer

rndc showzone returns "rndc: 'showzone' failed: failure" on valid zones

I am running BIND 9.18.12-0 on Ubuntu 22.04 and I have the following problem on more than one installation. I have even installed bind locally with a simple test configuration and I am still seeing this issue. Whenever i run rndc showzone somezone…
0
votes
1 answer

macOS DNS resolve issue in internal network with Bind9 as DNS service

I'm using Bind9 as a DNS service to resolve some domain names internally. The topology is simple, with one router for all internal computers, and all computers using an internal DNS to resolve both internal and external domain names. Let's say we…
john
  • 1
  • 2
0
votes
2 answers

Issue valid HTTPS certificates for intranet subdomains with letsencrypt

I'm trying to provide secure services on my home intranet. Up to now I've used self-signed certificates with a made-up domain example.foo, with a subdomain for my separate systems (e.g. srv1.example.foo). These domains are defined on my local DNS…
0
votes
0 answers

3% of Sendmail Localhost Relays are Deferred

Using Debian 10.3 and Sendmail Version 8.15.2, mail being sent with relay=[127.0.0.1] results in stat=Deferred: Name server: [127.0.0.1]: host name lookup failure. This occurs only 3% of all localhost relays. What would cause this? Example mail.log…
Dorothy
  • 179
  • 7
0
votes
0 answers

Windows DNS randomly responds with SOA NS

Strange behavior at the client. Monitoring software is set to ping a hostname every minute Checks with Windows DNS server, which forwards the query to F5 GTM if needed. It resolves hostname successfully 95% of the time. I ran packet capture and on…
Robert X
  • 1
  • 1
0
votes
1 answer

How do I perma-stop Chrome from using it's own DNS across the enterprise?

When attempting to access an intranet site, Chrome will ignore our DNS settings and navigate to a public page. Our computers are referencing only our private DNS server. Last week, I disabled built-in DNS and DoH in Google Workspace Admin…
Dan
  • 1
  • 1
0
votes
1 answer

Configure Windows Server w/ multiple interfaces reply to DNS with subnets from specific interfaces?

Our windows server 2019 needs to respond to requests with IP addresses that are only on the interface subnets they are being quried from. We have two DC's. Each has 3 interfaces. Each interface is its own subnet. I believe this is a split brain type…
Dave
  • 229
  • 2
  • 10
0
votes
0 answers

are comments in Bind zone file visible to anyone who can access the view

I just implemented zone transfer restrictions (IP plus tsig key) on my bind server. I assume this should mean that the entire zone contents are not accessible by anyone anymore, correct? If I place comments (leading semi-colon) in my zone files, is…
Brian
  • 181
  • 1
  • 11
0
votes
1 answer

CNAME for Active Directory domain controller

So my question is - is there any concern to add a CNAME for one domain controller to provide to copiers and other internal sites/applications? I read that Active Directory doesn't truly "need" a load balancer so if that's true then providing a "VIP"…
Grim
  • 1
  • 1
0
votes
1 answer

bind dns zone notify with multiple view

I experienced some difficulties with zones from what should have been an internal view (with RFC1918 addresses plus public IPv6) leaked to the external view (public IPv4 plus public IPv6). I think I pinned it down to where I had notify explicit on…
Brian
  • 181
  • 1
  • 11
0
votes
0 answers

Move-Copy-Export DNS zone from old Domain to non domain windows server

We have an old 2008 Server being utilized for it's DNS only, all computers are joined to Azure. The issue is it is a domain controller, never de-commissioned, just not utilized for anything but DNS at this point. But we are firing up a new 2022…
Schmad05
  • 1
  • 2
0
votes
1 answer

Setup split DNS to external CNAME when resolving within an internal CoreDNS?

I have an internally hosted DNS resolver via Core DNS running on my network. Everything is great aside from one thing, which is I cannot load my apex domain when connected over VPN. The reasoning is because the zonefile maps my domain name to the…
Ryan
  • 1
  • 2
0
votes
1 answer

Domain name is resolving to DC that is not accessable for VPN users

Problem is when one (and only one) VPN user tries to resolve our domain name (xxx.local), it is resolving to a DC that is not accessible to VPN users, and not the ones that are accessible. We have 2 sites with a point-to-point connection between…