Windows DNS redirect

Posted on 2007-10-09
Last Modified: 2008-01-09
Hey everyone,

I am trying to make a static A record entry for a single domain, that is served by our domain controller, however I want all other entries for that domain, to go to an external DNS server (the normal route).


(static record on domain controller) ->
(request external DNS) ->
(request external DNS) ->

So basically only that first entry is served to internal clients as the internal IP, for everyone other entry, it queries external DNS, like normal. It is basically the equivalent of adding that static entry to everyone's LMHOSTS file... there may be another/better way to do it, so let me know :) Or if it is even possible.
Question by:malken00
    LVL 15

    Accepted Solution


    I had looked for this a year or two ago, what I found was that it was.....

    Not possible to do this with Microsoft DNS. I think bind has options for different setups, however no not in MS DNS. Bind has a concept of client views.

    With MS DNS you either are authoritative for the domain, or not authoritative.

    Like you said maybe a hosts file, just remember if you have laptops how things would work if the user is internal or external to the network.

    LVL 70

    Expert Comment

    What are you trying to achieve ? Perphaps there is a better way ?
    LVL 15

    Expert Comment


    You could of course leave the in DNS  if you just have a single entry that you want to have which has only an internal non-routed IP address. - - -

    (static record on domain controller) ->
    (request external DNS) ->
    (request external DNS) ->

    The problem would come when you want to use the same name for a host and would need to publish different IP addresses for internal and external.

    In that case you would need to lookup split brian dns. if you google for that you will see some answers.

    What I would suggest, if the number of external DNS records is small < 100,
    then for external dns let an outside company host the external dns -

    1) like your name registar  (,, etc)
    2) a company that focus on dns - or others.
    3) your isp

    Most have workable dns management via a browser, in the old days or older ISPs have you log tech support tickets - which complicated things when you wanted a change.

    That way the only dns servers you need to worry about is your internal one. This configuration would fall under the split brian setup.

    Hope this helps,

    Featured Post

    Do email signature updates give you a headache?

    Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

    Join & Write a Comment

    Several part series to implement Internet Explorer 11 Enterprise Mode
    A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now