redirecting root hints to fake internal root server

Colin Harvey colinedwardharvey at
Tue Aug 27 18:25:42 UTC 2013

dig +trace responds with a list of authoritative nameservers for the zone and the error "dig: couldn't get address for" where the error cycles through all four of the authoritative nameservers.
Also is not

From: Colin Harvey <colinedwardharvey at>
To: "WBrown at" <WBrown at> 
Cc: " at" < at>; bind users <bind-users at> 
Sent: Tuesday, August 27, 2013 2:13 PM
Subject: Re: redirecting root hints to fake internal root server

Thanks.  But I already have that option for the zone.  Still not seeing traffic going to

From: "WBrown at" <WBrown at>
To: Colin Harvey <colinedwardharvey at> 
Cc: bind users <bind-users at>; at 
Sent: Tuesday, August 27, 2013 1:20 PM
Subject: Re: redirecting root hints to fake internal root server

From: Colin Harvey <colinedwardharvey at>
> My environment is firewalled from the real world.  For queries on 
> zones to which I'm not master, I want to recurse to a corporate 
> server.  nslookup 
> internal.corporate.server works fine.  Setting "." to use this 
> internal server in the root.hints file does not.  In fact I do not 
> even see my system trying to recurse.  (I'm looking at network 
> traffic with a sniffer.)
> My root.hints:
> .    600    IN    NS    internal.corporate.server.
> internal.corporate.server.    600    IN    A
> Alternatively I've setup a forwarding zone in named.conf to query 
> for ''.  When monitoring the 
> network for udp data over port 53, I'm not even seeing the query 
> being forwarded.  Why?

Add these lines to your options section:

        forward only;
        forwarders {;};


Confidentiality Notice: 
This electronic message and any attachments may contain confidential or 
privileged information, and is intended only for the individual or entity 
identified above as the addressee. If you are not the addressee (or the 
employee or agent responsible to deliver it to the addressee), or if this 
message has been addressed to you in error, you are hereby notified that 
you may not copy, forward, disclose or use any part of this message or any 
attachments. Please notify the sender immediately by return e-mail or 
telephone and delete this message from your system.

Please visit unsubscribe from this list

bind-users mailing list
bind-users at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the bind-users mailing list