<html><head> <style type="text/css" title="rt_noDelete">
blockquote.rt {
margin: 0 0 15px;
border-left: 4px solid #81c784;
padding: 0 0 0 12px;
display: block;
}
p { margin: 0 0 0 0 }
.email-signature {font-family:"Arial"; font-size: 8pt; font-style: italic; font-weight: normal; text-decoration: none; }
</style></head><body><p class="norm">Static-sub fixes the issue.</p><p class="norm"> </p><p class="norm">Any idea why static-sub works when forwarder doesn't?</p><p> </p><p>(Again, the server is using recursion. Dig queries return the RA flag, so I know it's actually offering recursion in reality.)</p><p class="norm"> </p><p class="norm">I can live with static-sub just fine, since it works - but I'd really love to understand why forwarder didn't - just so I can avoid getting bitten by it in some other situation.</p><p class="norm"> </p><p class="norm">Thanks Andrej!</p><p class="norm">-Greg</p><p class="norm"> <br/>
</p><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix="OS> ">Is static-stub something you are looking for?<br/>
</blockquote><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix="OS> ">Reference documentation:<br/>
<a class="HR" href="https://bind9.readthedocs.io/en/v9_18_0/reference.html?highlight=static-stub#zone-types">https://bind9.readthedocs.io/en/v9_18_0/reference.html?highlight=static-stub#zone-types</a><br/>
</blockquote><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix="OS> ">And in human terms:<br/>
<a class="HR" href="https://jpmens.net/2011/01/25/binds-new-static-stub-zone-type/">https://jpmens.net/2011/01/25/binds-new-static-stub-zone-type/</a><br/>
</blockquote><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix="OS> ">Ondrej<br/>
--<br/>
Ondřej Surý (He/Him)<br/>
<a class="HR" href="mailto:ondrej@isc.org">ondrej@isc.org</a><br/>
</blockquote><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix="OS> ">My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.<br/>
</blockquote><p class="norm"><br/></p><blockquote class="Odd QOdd rt" prefix=">"><blockquote class="Even QEven rt" prefix=">> ">On 28. 2. 2022, at 21:47, Gregory Sloop <<a class="HR" href="mailto:gregs@sloop.net">gregs@sloop.net</a>> wrote:<br/>
<br/>
So, I want to forward all queries for <br/>
*.ab.somedomain.local to some other internal DNS servers.<br/>
(Records in *.ab.somedomain.local actually are our active domain servers)<br/>
<br/>
(Yes, I know .local is reserved now, but we've been using it a long time and changing would be rather painful. Unless there's some horrible consequences, I think we'll just continue for now. We won't ever use mDNS.)<br/>
<br/>
zone "ab.somedomain.local" {<br/>
type forward;<br/>
forward only;<br/>
forwarders { 10.0.0.1; 10.0.0.2; 10.0.0.3; };<br/>
};<br/>
<br/>
But this doesn't appear to do what I want.<br/>
<br/>
If I add the above to my regular BIND servers configuration, it doesn't return results like it's forwarding them. (I get NXDOMAIN for abc.ab.somedomain.local.)<br/>
<br/>
If I do a dig @10.0.0.1 abc.ab.somedomain.local from the BIND server, I get a proper result. (force dig to use the AD name servers directly, instead of relying on the forward.)<br/>
<br/>
(And yes the resolv.conf file has the ip addresses of the main internal BIND servers in it, and those only.)<br/>
I've looked and while I think I'm doing it right, I'm not entirely sure.<br/>
I figured before I beat my head against the wall for too long, I'd ask the real experts! :)<br/>
<br/>
<br/>
-- <br/>
Visit <a class="HR" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br/>
<br/>
ISC funds the development of this software with paid support subscriptions. Contact us at <a class="HR" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br/>
<br/>
<br/>
bind-users mailing list<br/>
<a class="HR" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br/>
<a class="HR" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a><br/>
</blockquote></blockquote><p class="norm"><br/></p><p class="norm"></p><div class="email-signature"><br/>
</div></body>