<div dir="ltr">Hi.<div>If I understand you correctly, you are trying to get your resolver to go to two different places (main_hidden_dns_server and other_dns_server) for answers to the same question, and then want it combine those answers into a single response to the client, which contains PTR records for both names?</div><div><br></div><div>If I got that correct, then it won't. If you want multiple PTR records to be associated with different names then they have to be in the same zone/zone file.</div><div><br></div><div>A few comments:</div><div>- The statement "forward first' means, try forwarding first and only if that fails, then try recursion.</div><div>- Adding forwarders to a secondary zone tells the server what to do for names delegated from that zone. e.g. if the zone is "<a href="http://example.com">example.com</a>" and it contains "sub NS another.server.somewhere.else." then a query to it for "<a href="http://name.sub.example.com">name.sub.example.com</a>" will follow the "forwarders" statement because "<a href="http://sub.example.com">sub.example.com</a>" has been delegated away.</div><div>- Do you really want to be forwarding to your hidden primary anyway?</div><div>- Why are two different servers both authoritative for "100.168.192.in-addr.arpa"? That's asking for trouble.</div><div><br></div><div>Hope that helps.</div><div>Greg</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, 4 Mar 2024 at 15:35, Taavi Ansper via bind-users <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi<br>
<br>
I am trying to understand bind9 more thorughly.<br>
<br>
Backstory: We have been using bind9 for a long time and overhauling it <br>
for more "usage".<br>
<br>
We have been using a "hidden master dns" logic with views for different <br>
usages.<br>
<br>
E.g. Client -> Slave DNS Server <- (Transfer zones from hidden master)-> <br>
Hidden Master.<br>
<br>
We had two views "external" and "internal" and now we added a new view <br>
"dmz" aswell.<br>
<br>
In one of those zones we had an interesting DNS "thingy" where for <br>
example a CIDR <a href="http://192.168.100.0/24" rel="noreferrer" target="_blank">192.168.100.0/24</a> was generating entries to the main <br>
"hidden dns" server via includes. It uses a domain called <a href="http://example.com" rel="noreferrer" target="_blank">example.com</a>. <br>
Now another DNS server created DNS entries for the same CIDR <br>
<a href="http://192.168.100.0/24" rel="noreferrer" target="_blank">192.168.100.0/24</a> but it had a different domain "<a href="http://subdomain.example.com" rel="noreferrer" target="_blank">subdomain.example.com</a>". <br>
Including that info was easy.<br>
<br>
In the Slave DNS<br>
<br>
zone "<a href="http://example.com" rel="noreferrer" target="_blank">example.com</a>" {<br>
file blaah<br>
type slave<br>
masters { main_hidden_dns_server }<br>
}<br>
<br>
zone "<a href="http://subdomain.example.com" rel="noreferrer" target="_blank">subdomain.example.com</a>" {<br>
file blaah<br>
type slave;<br>
masters { other_dns_server }<br>
}<br>
<br>
But now comes the problem. When generating a PTR record <br>
100.168.192.in-addr.arpa, I wish to combine both of these "results" into <br>
one lookup. How can I do that? I tried to add:<br>
<br>
zone "100.168.192.in-addr.arpa" {<br>
file blaah<br>
type slave;<br>
masters { other_dns_server }<br>
forward first;<br>
forwarders { main_hidden_dns_server }<br>
}<br>
<br>
But this forwarding logic doesnt work. I have a feeling the forwarding <br>
only works specific zones. and you can't combine two of the same <br>
"names" into one. Am I correct and in order for PTR records to work I <br>
need to get them into a single file?<br>
<br>
-- <br>
----<br>
Taavi Ansper<br>
<a href="mailto:taavi.ansper@cyber.ee" target="_blank">taavi.ansper@cyber.ee</a><br>
<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>