DNS on private network

Thu Nov 17 16:24:54 UTC 2005

some DNS's, which are in 2nd level into my domain tree. The changes made in
the file are ...
.                        3600000  IN  NS    dns01.mydomain.
dns01.mydomain.      3600000      A    132.145.160.128 
.                        3600000  IN  NS    dns02.mydomain.
dns02.mydomain.      3600000      A    132.145.160.129

	In wich dns02 and dns01 are the roots for my private network. So all
the queries, that DNS's of 2nd level can't be resolved, are sent  to the
roots of my domain (dns01 or dns02).This process works fine.

	However, dns02 and dns01 are roots for my domain, so I can't
undertand why I have to have a Zone "." and if I had to have a Zone "." I
don't know what records I have to include it since They are the top of top.
	But I know, from my exprerience, that if I take out this zone from
root dns's they give me an error whenever I start the bind deamon.

Rodrigo Sánchez Ré 
Banco Itaú 
GTPD - Configuración de Redes 
Teléfonos: 4378-8400 Int.: 5082 / Directo: 4320-5528 
Rodrigo.SanchezRe at itau.com.ar

-----Mensaje original-----
De: Mark Andrews [mailto:Mark_Andrews at isc.org] 
Enviado el: jueves, 17 de noviembre de 2005 10:49
Para: Rodrigo Sanchez Re
CC: bind-users at isc.org
Asunto: Re: DNS on private network 

> 	Could you tell me where I can read about "How define a root
zone". 
> 
> 	Thanks very much for your answer.

	It is the same as any other zone except it has the name ".".

	It has a SOA record and a NS RRset at the apex.
	It may have data other than the SOA and NS RRsets at the apex.
	It may have delegations for the subzones (NS records).
	It may have glue record for the subzone delegations (A, AAAA records
	at or below delegation points).

	Mark

> -----Mensaje original-----
> De: Mark Andrews [mailto:Mark_Andrews at isc.org] 
> Enviado el: miércoles, 16 de noviembre de 2005 20:27
> Para: Rodrigo Sanchez Re
> CC: bind-users at isc.org
> Asunto: Re: DNS on private network 
> 
> 
> 
> > Hi,
> > 	I have a DNS server on a private network. It Server is 
> > authoritative
> 
> > for our private domain and it has some forward zone for other  
> > Internals domains,  configurated on others DNS. So all the 
> > queries  that It can't resolve itself or through of the forward 
> > zone, defined  on it, are being sent to a root-nameserver to look 
> > for a answer from  it. But I don't wish resolve queries for other 
> > domains don't defined. > 
> > So, how can I do for DNS don't make queries to a roots-nameserver 
> > for > 
> > domain don't defined on our DNS as master o forward zone?; I tried 
> > to
> remove "hint zone" but didn't work.
> > 	Thanks in advance
> > 
> > Rodrigo Sánchez Ré
> > 
> 
> 	Define a real root zone.
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org
> 
> ------_=_NextPart_001_01C5EB7A.71F92CE0
> Content-Type: text/html;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> <HTML>
> <HEAD>
> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; = 
> charset=iso-8859-1"> <META NAME="Generator" CONTENT="MS Exchange 
> Server version = 5.5.2654.45">
> <TITLE>RE: DNS on private network </TITLE>
> </HEAD>
> <BODY>
> <BR>
> 
> <P>        <FONT SIZE=2>Could you 
> = tell me where I can read about "How define a root zone". = 
> </FONT> </P>
> 
> <P>        <FONT SIZE=2>Thanks = 
> very much for your answer.</FONT> </P>
> 
> <P><FONT SIZE=2>Rodrigo Sánchez Ré </FONT>
> </P>
> 
> <P><FONT SIZE=2>Rodrigo Sánchez Ré </FONT>
> <BR><FONT SIZE=2>Banco Itaú </FONT>
> <BR><FONT SIZE=2>GTPD - Configuración de Redes </FONT> <BR><FONT 
> SIZE=2>Teléfonos: 4378-8400 Int.: 5082 / Directo: = 4320-5528 
> </FONT> <BR><FONT SIZE=2>Rodrigo.SanchezRe at itau.com.ar</FONT>
> </P>
> <BR>
> 
> <P><FONT SIZE=2>-----Mensaje original-----</FONT>
> <BR><FONT SIZE=2>De: Mark Andrews [<A = 
> HREF="mailto:Mark_Andrews at isc.org">mailto:Mark_Andrews at isc.org</A>] 
> = </FONT> <BR><FONT SIZE=2>Enviado el: miércoles, 16 de noviembre 
> de 2005 = 20:27</FONT>
> <BR><FONT SIZE=2>Para: Rodrigo Sanchez Re</FONT>
> <BR><FONT SIZE=2>CC: bind-users at isc.org</FONT>
> <BR><FONT SIZE=2>Asunto: Re: DNS on private network </FONT>
> </P>
> <BR>
> <BR>
> 
> <P><FONT SIZE=2>> Hi,</FONT>
> <BR><FONT SIZE=2>>       I have a DNS = 
> server on a private network. It Server is authoritative </FONT> 
> <BR><FONT SIZE=2>> for our private domain and it has some forward 
> = zone for other </FONT> <BR><FONT SIZE=2>> Internals 
> domains,  configurated on others = DNS. So all the queries 
> </FONT> <BR><FONT SIZE=2>> that It can't resolve itself or 
> through of the = forward zone, defined </FONT>
> <BR><FONT SIZE=2>> on it, are being sent to a root-nameserver to > look for a answer from </FONT>
> <BR><FONT SIZE=2>> it. But I don't wish resolve queries for other > domains don't defined. </FONT>
> <BR><FONT SIZE=2>> So, how can I do for DNS don't make queries to > a roots-nameserver for </FONT>
> <BR><FONT SIZE=2>> domain don't defined on our DNS as master o > forward zone?; I tried to remove "hint zone" but didn't > work.</FONT>
> <BR><FONT SIZE=2>>       Thanks in > advance</FONT>
> <BR><FONT SIZE=2>> </FONT>
> <BR><FONT SIZE=2>> Rodrigo Sánchez Ré</FONT>
> <BR><FONT SIZE=2>> </FONT>
> </P>
> 
> <P>        <FONT SIZE=2>Define a 
> = real root zone.</FONT> <BR><FONT SIZE=2>--</FONT>
> <BR><FONT SIZE=2>Mark Andrews, ISC</FONT>
> <BR><FONT SIZE=2>1 Seymour St., Dundas Valley, NSW 2117, > Australia</FONT>
> <BR><FONT SIZE=2>PHONE: +61 2 9871 > 4742           &n> bsp;     INTERNET: Mark_Andrews at isc.org</FONT>
> </P>
> 
> </BODY>
> </HTML>
> ------_=_NextPart_001_01C5EB7A.71F92CE0--
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org