forward only single zone

[Darcy Kevin (FCA)]

Don't turn your DNS and/or network infrastructures into pretzels trying to get this "forwarding" or "(reverse) proxying" to work. Ultimately, I expect you'll end up maintaining the records of interest in both an internal and an external version of the subzone. Then the only question becomes to what extent you can automate the "sync".

												- Kevin

-----Original Message-----
From: bind-users-bounces at lists.isc.org [mailto:bind-users-bounces at lists.isc.org] On Behalf Of Oto BREZINA
Sent: Friday, March 04, 2016 6:09 PM
To: bind-users at lists.isc.org
Subject: forward only single zone

I got successfuly set schizophrenic bind based DNS. It is version 9.9.5 running on Ubuntu .

I got local zones :
     serving internal side.
     public zones master and slaves (server in same way for internal and externals clients)

I need to create one subzone of public zone which is served by another server. This can not be transfered. Server is located on LAN.
Is there way to set this? I tried to set views, but with no luck.

my setting right now is like:

view "local" {
         allow-query { internals; };
         match-clients { internals; };
         recursion yes;

         include "local zones";
         include "public zones";
         include "slave zones";
};

view "public" {
         allow-query { any; };
         match-clients { any; };
         recursion no;

         include "public zones"; // contains example.com with clue to same server
         include "slave zones";
};

I need to add

zone "calc.example.com" {
                 type forward;
                 forward only;
                 forwarders { local_machine; };
         };

adding it to local wont let external client to get access, but works from internals adding it to public, does not help, it returns only clues; forward only wont word as recursion is no, adding another view public2 seems have no affect.

I'm aware it is not recomented setup, but even I would run separate local and public server, I have still no idea how have not open DNS but forward single zone.

Please advise.

Oto
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users