[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 236
  • Last Modified:

DNS, root servers,the Internet and a home network

Hello,

I have a combined 4 port fast ethernet switch and ADSL Router and have recently started using the WAN port on it, with NAT enabled. I have configured the router to point to my ISP (and it’s DNS servers). I am also running a small LAN at home (actually it's a W2K domain with 1 DC and DNS - AD integrated).

I wanted all PC's at home (servers or other) to be able to connect to the internet so I thought I needed to point them to the ISP DNS to get out name resolution on the internet but then I thought -  if I change the DNS servers for the network adapters this will prevent name resolution and registration on my LAN won't it...? And similarly, if I point them to use my local DNS, then I lose name resolution for the internet?

I know the answer is most likely quite simple (without having to resort to hosts files)...but I am getting myself confused...I thought I could do the following but need some expert advice before attempting anything...:

1. Leave DNS on the DC serving my LAN and point it's DNS settings on it's own NIC to itself (best practice)
2. Configure all clients on my LAN to point to the local DNS (my DC)
3. Remove the root zone on the DC to allow forwarders to be configured
4. Configure 2 DNS forwarders on my DC - the primary and secondary DNS's of my ISP

From my way of thinking - if my clients need name resolution on the local LAN then my DNS will be able to help, otherwise it will forward the query to the DNS of the ISP?

would this work?
is it wise?

Regards and thanks,
Alsace.
0
alsace
Asked:
alsace
1 Solution
 
Debsyl99Commented:
Hi

Correct by the looks of it:

Yes - remove the root zone in dns - configure forwarders to point to you isp's name servers - the only place these nameservers should be listed is here. Point your tcp/ip settings for primary dns server on your nics on pc's and server at the ip address of your dc.

Your pc's then look to resolve dns queries to your dc. If your dc doesn't think it's the root server (which it can't be for internet name resolution) it then forwards the queries to your isp's nameservers. All should be well, - just ensure dynamic updates on your forward look up zone - mydomain.com,

Deb :))
0
 
alsaceAuthor Commented:
Thanks Debsyl99 - I thought as much, just needed confirmation!! This is my accepted answer.
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now