<html><head> <style type="text/css" title="rt_noDelete">
blockquote.rt {
margin: 0 0 15px;
border-left: 4px solid #81c784;
padding: 0 0 0 12px;
display: block;
}
p { margin: 0 0 0 0 }
.email-signature {font-family:"Arial"; font-size: 8pt; font-style: italic; font-weight: normal; text-decoration: none; }
</style></head><body><p class="norm">So, I want to forward all queries for </p><p>*.ab.somedomain.local to some other internal DNS servers.</p><p>(Records in *.ab.somedomain.local actually are our active domain servers)</p><p> </p><p>(Yes, I know .local is reserved now, but we've been using it a long time and changing would be rather painful. Unless there's some horrible consequences, I think we'll just continue for now. We won't ever use mDNS.)</p><p> </p><p class="norm">zone "ab.somedomain.local" {</p><p>type forward;</p>
<p> forward only;</p>
<p>forwarders { 10.0.0.1; 10.0.0.2; 10.0.0.3; };</p>
<p>};</p><p class="norm"><br/></p><p class="norm">
But this doesn't appear to do what I want.</p><p> </p><p>If I add the above to my regular BIND servers configuration, it doesn't return results like it's forwarding them. (I get NXOMAIN for abc.ab.somedomain.local.)</p><p> </p><p>If I do a dig @10.0.0.1 abc.ab.somedomain.local from the BIND server, I get a proper result. (force dig to use the AD name servers directly, instead of relying on the forward.)</p><p> </p><p>(And yes the resolv.conf file has the ip addresses of the main internal BIND servers in it, and those only.)</p><p>I've looked and while I think I'm doing it right, I'm not entirely sure.</p><p>I figured before I beat my head against the wall for too long, I'd ask the real experts! :)</p><p> </p><p class="norm"></p><div class="email-signature"><br/>
</div></body>