<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
May I suggest the book DNS and Bind 5th edition.<br>
<br>
Availible from Amazon:<br>
<a class="moz-txt-link-freetext" href="http://www.amazon.com/DNS-BIND-5th-Cricket-Liu/dp/0596100574/ref=sr_1_1?ie=UTF8&qid=1293629633&sr=8-1">http://www.amazon.com/DNS-BIND-5th-Cricket-Liu/dp/0596100574/ref=sr_1_1?ie=UTF8&qid=1293629633&sr=8-1</a><br>
<br>
All of these things can be done. Do some reading!<br>
<br>
Yes you setup forwarding only for the microsoft domain name. <br>
<br>
And yes you can setup BIND to not answer questions from the Internet
about your Microsoft domain, but in my opinion that is not necessary.
You do want to disable recursive queries from the Internet and there
are no pointers out on the Internet pointing your microsoft domain to
you BIND server, so noone outside your internal network will know about
the microsoft domain.<br>
<br>
The book has examples plus syntax and examples that will cover the rest
of your questions.<br>
<br>
Lyle Giese<br>
LCR Computer Services, Inc.<br>
<br>
Riccardo Castellani wrote:
<blockquote cite="mid:72C05D80B0FA44CCADBDB6B1F009DB6F@Riccardo"
type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 8.00.6001.18999">
<div>>Hopefully the microsoft domain is a name that is not
availible on the <br>
>internet, like mymsdomain.local. Then your microsoft server is
known as <br>
>domaincontroller.mymsdomain.local.<br>
Of course !<br>
<br>
<br>
>In that case you would setup a forwarder in BIND for
mymsdomain.local that <br>
>points to the microsoft dns servers.<br>
<br>
Ok, but I'd like understanding if:<br>
1- for every query to BIND there is always a forwarding to microsoft
dns <br>
servers or if there is only a forwarding for queries containing <br>
'mymsdomain.local' domain ?<br>
2- If I configure BIND how you suggest me, can I not permit Internet
queries <br>
for ''mymsdomain.local' ?<br>
3- Can you show me sample example of forwarding configure file for
specific <br>
domain, please ?<br>
<br>
<br>
</div>
<blockquote
style="border-left: 2px solid rgb(0, 0, 0); padding-left: 5px; padding-right: 0px; margin-left: 5px; margin-right: 0px;">
<div
style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;">-----
Original Message ----- </div>
<div
style="background: rgb(228, 228, 228) none repeat scroll 0%; font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><b>From:</b>
<a moz-do-not-send="true" title="lyle@lcrcomputer.net"
href="mailto:lyle@lcrcomputer.net">Lyle Giese</a> </div>
<div
style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>To:</b>
<a moz-do-not-send="true" title="ric.castellani@alice.it"
href="mailto:ric.castellani@alice.it">Riccardo Castellani</a> </div>
<div
style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Sent:</b>
Tuesday, December 28, 2010 11:12 PM</div>
<div
style="font-family: arial; font-style: normal; font-variant: normal; font-weight: normal; font-size: 10pt; line-height: normal; font-size-adjust: none; font-stretch: normal;"><b>Subject:</b>
Re: to route specific dns query to specific dns server</div>
<div><br>
</div>
Riccardo Castellani wrote:
<blockquote cite="mid:5C583918914645CCBF88420ADC8F621D@Riccardo"
type="cite">
<meta name="GENERATOR" content="MSHTML 8.00.6001.18999">
<style></style>
<div><font face="Segoe UI" size="2">I'm using Bind9 for my name
server (SERVER EXT) and to give name resolution for who access from
Internet to my domain (e.g. to access to my Web site or to write to my
email addresses). </font></div>
<div><font face="Segoe UI" size="2">My domain is example.com:</font></div>
<div> </div>
<div><font face="Segoe UI" size="2"><a
href="http://www.Example.com" moz-do-not-send="true">www.Example.com</a></font></div>
<div><font face="Segoe UI" size="2"><a
href="mailto:test.host@example.com" moz-do-not-send="true">test.host@example.com</a></font></div>
<div> </div>
<div><font face="Segoe UI" size="2">This dns server maps only my
pubblic addresses.</font></div>
<div><font face="Segoe UI" size="2">This server has 2 nics:
internal + external ip address. </font></div>
<div><font face="Segoe UI" size="2">Some internal servers, as
proxy or mail servers, send dns requests to this dns server to solve
names.</font></div>
<div><font face="Segoe UI" size="2">I have also internal
MS domain (dns server is SERVER INT) which is different from the
other, it's created by Domain Controllers + AD (activedirectory.com)
and it's used to map machines into internal network.</font></div>
<div> </div>
<div><font face="Segoe UI" size="2">Now I my email server or
proxy server (which are in internal network) need to synchronize time
so they have to use my internal NTP server; these Linux machines
use 'SERVER EXT' in /etc/resolv.conf, so how I </font><font
face="Segoe UI" size="2">can indicate to send request for specific
internal name (ntp.activedirectory.com) to dns server INT ?</font></div>
<div><font face="Segoe UI" size="2">I could insert it inot
/etc/hosts but it's not dnssssss service !!!</font></div>
<div> </div>
<div> </div>
</blockquote>
Hopefully the microsoft domain is a name that is not availible on the
internet, like mymsdomain.local. Then your microsoft server is known
as domaincontroller.mymsdomain.local. <br>
<br>
In that case you would setup a forwarder in BIND for mymsdomain.local
that points to the microsoft dns servers. Then when the linux boxes
want domaincontroller.mymsdomain.local, your Bind name server will ask
the microsoft dns servers for the answer.<br>
<br>
Lyle Giese<br>
LCR Computer Services, Inc.<br>
</blockquote>
</blockquote>
<br>
</body>
</html>