<div dir="ltr"><div>Hi, <br></div><div>The google DNS server was only examples.. it can be some internal DNS servers and external DNS servers. For eg 10.10.10.10; 120.10.13.12 etc. where the DNS requests are being forwarded to.. <br>
</div><div><br></div><div>There are issues with connectivity where the DNS entries are not synced up. And these entries are all specific to say "<a href="http://mycompany.com">mycompany.com</a>" where the DNS are residing in several locations.. <br>
</div><div>So when my local DNS is returning NXDOMAIN, the other locations which might have the entries are not tried.<br><br></div><div>the example <a href="http://mytestdomain101.mycompany.com">mytestdomain101.mycompany.com</a> is an example where my list is 10.10.10.10; 120.10.13.12 for example.. i try 10.10.10.10 - NXDOMAIN returned.. i want to try 120.10.13.12 before sending NXDOMAIN to my initial request.<br>
<br></div><div>I hope this helps.<br></div><div>Thanks</div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 31, 2013 at 1:05 PM, Matus UHLAR - fantomas <span dir="ltr"><<a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 30.05.13 12:56, sumsum 2000 wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have zone forwarders as follows with BIND9 setup with forward only option<br>
on a Non Authoritative DNS server<br>
<br>
zone "<a href="http://mytestdomain101.com" target="_blank">mytestdomain101.com</a>" IN {<br>
type forward;<br>
forwarders {8.8.8.8;4.2.2.1;8.8.4.4};<br>
forward only;<br>
};<br>
</blockquote>
<br></div><div class="im">
On 30.05.13 15:00, sumsum 2000 wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
This is a non-standard behavior and I would like to have the following:<br>
In the case where I am working on,<br>
/etc/resolv.conf contains localhost 127.0.0.1 and BIND is listening on<br>
localhost port 53 as non-authoritative DNS<br>
<br>
So all the requests are sent through 127.0.0.1 and based on the domain they<br>
are in forward only mode.<br>
</blockquote>
<br></div>
There is no point in forwarding just one domain to google recursive servers. Either forward ALL domains there (but in such case you could simply avoid<br>
local BIND and point resolv.conf to google), or point the domain directly to<br>
its servers instead of google.<br>
<br>
Since BIND 9.8 and you can do it by using "type static-stub" instead of type<br>
forward and use server-addresses instead of forwarders.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
There are specific domains for eg <a href="http://mygeo1.mycompany.com" target="_blank">mygeo1.mycompany.com</a>. There are specific<br>
authoritative DNS servers which contain this record.<br>
</blockquote>
<br></div>
If you are trying to say that some of authoritative servers for a domain do<br>
know about one record and others do not know, then the servers and the<br>
domain are broken and they need to be fixed.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<a href="http://mygeo1.mycompany.com" target="_blank">mygeo1.mycompany.com</a> is forwarded to <a href="http://myDNS1.mycompany.com" target="_blank">myDNS1.mycompany.com</a>,<br>
<a href="http://myDNS2.mycompany.com" target="_blank">myDNS2.mycompany.com</a>, <a href="http://myDNS3.mycompany.com" target="_blank">myDNS3.mycompany.com</a> which are specific authoritative<br>
DNS servers to <a href="http://mycompany.com" target="_blank">mycompany.com</a> But administrator does not know which one has<br>
it<br>
</blockquote>
<br></div>
So, is that <a href="http://mytestdomain101.com" target="_blank">mytestdomain101.com</a> or <a href="http://mycompany.com" target="_blank">mycompany.com</a> or <a href="http://mygeo1.mycompany.com" target="_blank">mygeo1.mycompany.com</a>?<br>
It would be easier to look at the problem if you provided us correct data.<span class="HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Matus UHLAR - fantomas, <a href="mailto:uhlar@fantomas.sk" target="_blank">uhlar@fantomas.sk</a> ; <a href="http://www.fantomas.sk/" target="_blank">http://www.fantomas.sk/</a><br>
Warning: I wish NOT to receive e-mail advertising to this address.<br>
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.<br>
42.7 percent of all statistics are made up on the spot. ______________________________<u></u>_________________</font></span><div class="HOEnZb"><div class="h5"><br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/<u></u>listinfo/bind-users</a><br>
</div></div></blockquote></div><br></div>