can bind8 override a single A record?
Nathan.HAND at dewr.gov.au
Thu Jan 20 04:56:41 UTC 2005
I have an unusual situation and I'm hoping bind8 can solve it.=20
The short version of the question is, can bind8 override a single A
record in a zone, but forward all other requests to the authorative
Here's the long version. Our dept has a partner site; partner.com.au.
They host their own DNS and the majority of access to partner.com.au is
via the Internet. However, they host a single server -
server.partner.com.au - that we connect to over a leased line. Their
internal addresses don't match our own, so NAT is used to make
server.partner.com.au appear to be on our local network. The leased line
router (running NAT) is independent of our border router.
This worked fine for many moons. We simply used the local NAT address in
all applications. Recently we have "acquired" an application that is
hardwired to use the name server.partner.com.au, resolving that to an IP
address via DNS. This, of course, resolves to the real address, not our
local NAT address, so the leased line is not being used.
The application cannot be fixed. It's not going to be practical to
deploy a hosts file to all our desktops/servers. Also it won't be
possible to change the authorative A record for server.partner.com.au.
NATing the real address into the local NAT address at our border router
was considered and rejected. A combination of politics, bureaucracy and
technical hurdles have exhausted all those possibilities.
So the thought running around here was, could we modify our own DNS
server to "rewrite" the server.partner.com.au A record to use our NAT
address, but leave all other records in that zone alone? We don't want
to be authorative for the entire zone. We just want to override a single
A record for the benefit of this application.=20
I hope that explanation was clear. Any ideas on what can be done?
The information contained in this e-mail message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this e-mail is unauthorised. If you have received
this e-mail in error, please notify the sender immediately by reply e-mail
and delete all copies of this transmission together with any attachments.
More information about the bind-users