<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi Kevin, Mark & Kevin,<br>
<br>
thank you for your questions that pointed me to the right track.<br>
<br>
A quick summary:<br>
<br>
I did my testing in a dev server (let's say with IP address
123.123.123.10) , that is serving the same zones as the live
server. I added to the zone file, lets call it example.com, the
following:<br>
<br>
<font face="Courier New, Courier, monospace">$ORIGIN subdn<br>
@ IN NS ns<br>
ns IN A 123.123.123.20</font><br>
<br>
the server at running at 123.123.123.20 was configured to as
authoritative for zone subdn.example.com.<br>
<br>
From a client in the internal view:<br>
<br>
<font face="Courier New, Courier, monospace">dig
xxx.subdn.example.com @123.123.123.10<br>
dig xxx.subdn.example.com @123.123.123.20</font><br>
<br>
would work OK<br>
<br>
From a client in the external view:<br>
<br>
<font face="Courier New, Courier, monospace">dig
xxx.subdn.example.com @123.123.123.10</font><font face="Courier
New, Courier, monospace"><br>
<br>
</font>would fail with 'recursion requested but not available'.<br>
<br>
I was testing with dig @123.123.123.10 as it is a dev server not
advertised as handling example.com in the dns hierarchy proper.<br>
<br>
After applying the same settings on the live servers dig A <font
face="Courier New, Courier, monospace">xxx.subdn.example.com </font>+trace
shows delegation now works OK, and after allowing negative caches
to expire host <font face="Courier New, Courier, monospace">xxx.subdn.example.com
</font><font face="Courier New, Courier, monospace"><font
face="sans-serif">also gives the right answer.<br>
<br>
Lessons learned:<br>
</font></font>
<ul>
<li><font face="Courier New, Courier, monospace"><font
face="sans-serif">If you are going to have a dev server,
have a dev domain too (and not a shadow of the live
domain), with working delegation from the root servers
down, and do not try to cut corners with dig @dev-server<br>
</font></font></li>
<li><font face="Courier New, Courier, monospace"><font
face="sans-serif">In dev servers, use really short TTLs!</font></font></li>
<li><font face="Courier New, Courier, monospace"><font
face="sans-serif">delegation & forwarding are VERY
different and you should be very clear to which one is
ppropriate. A workaround is NOT a solution.<br>
</font></font></li>
</ul>
<font face="Courier New, Courier, monospace"><font
face="sans-serif">Thanx again<br>
<br>
Y<br>
<br>
</font><br>
<br>
</font><br>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
</body>
</html>