Delegation, parenting, and slaves/stubs

Barry Margolin barmar at alum.mit.edu
Fri May 19 02:10:27 UTC 2006


In article <e4i4t2$2j9u$1 at sf1.isc.org>,
 "Norman Joseph" <norman.pb.joseph at gmail.com> wrote:

> We run a split DNS setup, with separate external DNS authority for our
> public face, and internal DNS authority behind a firewall, with
> forwarders for external resolution.  Internally, the authoritative DNS
> servers for forward & reverse zones are Linux, but subdelegations from
> these zones are made to internal Windows boxes.
> 
> When we delegate a subdomain (forward or reverse), is it necessary for
> the parent zone servers to also run slave zones for the delegation?  If
> not necessary, is there any benefit in doing so?  And does it matter
> whether you use a "slave" zone or a "stub" zone for this purpose?

You need to configure the parent servers as slaves for the subzones or 
add forward zones for them.  Otherwise, when the server needs to recurse 
for a subdomain, it will send to its forwarders, which are outside and 
can't access the internal Windows boxes.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***



More information about the bind-users mailing list