<div dir="ltr"><div><div><div class="gmail_extra"><div class="gmail_quote">On Fri, Jan 31, 2014 at 11:10 AM, Steve Presser <span dir="ltr"><<a href="mailto:steve@pressers.name" target="_blank">steve@pressers.name</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Hey all,<br>
Please forgive me if any of my terminology is off - I have not spent as much time in the documentation as I'd like.<br>
I have an odd situation that I would like to know if it is possible and would much appreciate a pointer to any relevant documentation or write-ups.<br>
I manage a domain name which, for reasons of reliability, uses an externally managed DNS server (zoneedit). We're looking to add private network DNS for internal machines. I've got BIND up and running on an internal machine. However, we have public records that need to be accessible internally (SPF, DKMS, jabber servers, MXs, etc). Additionally, using an internal-only namespace is not an option, due to laptops which go in and out of the network and need to be able to connect without settings modification.<br>
I'm trying to figure out how to do some sort of pass through arrangement, where the internal BIND server will first attempt to do the lookup with local records. If it has no local record, it will then fall back to the answer returned by the external (zoneedit) server.<br>
I know that if there was only one server, this would simply be split horizon. However, I don't know what to call this setup, and am having a hard time searching for it because of that. (So I apologize if this is then a dumb question).</p>
<p dir="ltr">Any help you can offer is much appreciated. Thanks!<span class="HOEnZb"><font color="#888888"><br>
Steve</font></span></p><br></blockquote></div><br></div><div class="gmail_extra">Hi Steve,<br><br></div>I'm afraid I'm not following you here. You have records which absolutely need to be public: SPF, MXs--mail won't work otherwise. Do you want your DKMS and jabber records to be internal-only, or can they be public as well?<br>
<br></div>If everything can be public, why the question? If you want internal-only records, why not just do split horizon of some sort where you use zoneedit as a slave and your local BIND view as a master? That way you have two views, one for internal IPs, and one for external IPs.<br>
<br></div>John<br></div>