Monday, April 9, 2018

bind - How do I make my internal dns forward requests to a given server



We have a DNS server internally that looks up IP addresses for all internal hosts and connects to root dns servers for all other domains (the rest of the internet). Here is my config



options {
listen-on port 53 { 127.0.0.1;any; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query {192.168.1.0/24; 127.0.0.1; };
recursion yes;
};

logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};

};

view “internal” { // What the home network will see

match-clients { 127.0.0.1;any; };
match-destinations { 127.0.0.1;any; };

recursion yes;

zone "." IN {

type hint;
file "named.ca";
};

include "internal_zones.conf";
};


We need to tweak this to go to our ISPs dns, x.y.z.w instead of the root dns servers if the host cannot be resolved internally.




Config:



Fedora 10/Bind 9.5.2


Answer



You would need to use the forward only and forwarders options like this. Replace the google servers with the servers you need.



options {
...
forward only;


forwarders {
8.8.8.8; // google public dns
8.8.4.4;
};
...
};

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...