Solved

How to I convert an A record to an NS record in Windows 2003 Server?

Posted on 2008-06-10
15
267 Views
Last Modified: 2010-04-07
How do I do this in Windows 2003 Server?

Currently your DNS likely has an A record for the forums that looks something like this
forum IN A 123.123.123.123
We would like you to change that to two NS records that will look like this:
forum IN NS ns1.foobar.com
forum IN NS ns2.foobar.com
0
Comment
Question by:snoopspecial
  • 7
  • 6
  • 2
15 Comments
 
LVL 15

Expert Comment

by:LegendZM
ID: 21755195
You don't create NS records in DNS... you create a zone

Open the DNS snapin, rightclick the server icon in the tree, and click new Zone, this will make a new authoratative zone for whatever domain you're trying to control. Then you specify the name server on the domain registrar to be that of your DNS server.

http://www.informit.com/articles/article.aspx?p=405516

0
 
LVL 19

Expert Comment

by:Melih SARICA
ID: 21755219
dns file types r near_y the same..
syntax is same.. (A , Cname etc )

but.. in windows u can do it in DNS mmc snapin.. or with  dnscmd  tool

Melih SARICA
0
 

Author Comment

by:snoopspecial
ID: 21755246
so for example, if I have foo.com
and the want me to have forum.foo.com then I should create a new zone called that?
I've tried this too - but after I do this, and try to ping the DNS name, it can't find anything.
0
 
LVL 15

Expert Comment

by:LegendZM
ID: 21755315
Yes, you would create a zone called forum.foo.com and in there create an A record, leave the name blank, and for IP enter the IP of the site.  
so if forum.foo.com is  1.1.1.1

make a zone forum.foo.com
add an A record with no name and an ip of 1.1.1.1
0
 

Author Comment

by:snoopspecial
ID: 21755317
so now I have the following:

Forward Zones

foo.com
forum.foo.com
---(same as parent folder) NS ns1.foobar.com
---(same as parent folder) NS ns2.foobar.com   (note, FOOBAR, not FOO)
---(same as parents folder) SOA ns1.foobar.com, hostmaster.foobar.com

Is this right?

So when I ping forum.foo.com - it should go to ns1.foobar.com and get the IP for the server. At the moment, the ping is not working.
0
 
LVL 19

Expert Comment

by:Melih SARICA
ID: 21755357
ney snoopp..

if u ave a foo.com  domain...
just right click it and select add A host from the popup menu

Write forum on host name then ip and its ok...

u dont need to create a new zone for forum.foo.com

Melih SARICA
0
 
LVL 15

Expert Comment

by:LegendZM
ID: 21755364
You need to create an A record as well within each zone pointing to that zone's IP, leave the name in the A record blank.

Rigth click the zone, new Host "A", type nothing for the name, and type the IP of the actual server

then you can point the Name server to the IP address of that DNS srever.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 15

Expert Comment

by:LegendZM
ID: 21755372
@ non_zero

You will need to create a new zone if you want to be authoratative for that sub domain and add lower level sub domains which i believe is what snoop is trying to do.
0
 

Author Comment

by:snoopspecial
ID: 21755380
So LegendZM:

When I do that, I get this from the ping?

nslookup> ping forum.foo.com

Server: forum.foo.com
Address:  1.1.1.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.


Does that mean that the new DNS server don't have a record for my record?
0
 
LVL 15

Expert Comment

by:LegendZM
ID: 21755395
go to command prompt type ipconfig /flushdns

I don't think you can ping from an nslookup prompt?

make sure that your DNS on your Tcp/ip properties is also pointed to your dns server.
0
 

Author Comment

by:snoopspecial
ID: 21755403
@ LegendZM in re: non_zero

Correct. I want the forum.foo.com DNS to be handled by an outside DNS server, not the same ones that control my foo.com
0
 
LVL 15

Expert Comment

by:LegendZM
ID: 21755425
So right now foo.com DNS is handled by you internally on windows and you wan tforum.foo.com to be handled by another DNS server outside your org / control?
0
 

Author Comment

by:snoopspecial
ID: 21755439
i did the flushdns... no change..
i pinged from the cmd prompt ... i get the 1.1.1.1

the point of the FOOBAR dns server is so that the hosting company can change the IP at will without relying on my server to be out of date.

If i replace 1.1.1.1 with a fixed IP, doesn't that defeat the point of having them resolve the final address for forum.foo.com? Before I was doing that essentially by have an A record in my foo.com for forum.foo.com is a 123.123.123.123
0
 

Author Comment

by:snoopspecial
ID: 21755485
Right...

So.. I am handling foo.com on Windows 2003 Standard
I had a record for forum.foo.com is a 123.123.123.123 (not my IP range)

my hosting company said, remove the A record, and create an NS for forum.foo.com so that it points to their NS servers.
Then they can resolve forum.foo.com with an IP from their range.
0
 

Accepted Solution

by:
snoopspecial earned 0 total points
ID: 21755556
so I am getting somewhere now.

1. Added forum to the foo.com as a new delegation
(rather than creating a new zone).

2. Then I can add two NS servers for the new foobar.com site.

This seems to work so far and ping is working, but they are checking on their side if the IP is correct (which it doesn't appear to be).

So the tree looks like this now:

foo.com
-- _msdcs
-- _sites
-- _tcp
-- _udp
-- DomaindDNSZones
-- ForestDNSZones
-- forum
-- (2 records)
----- (same as parent folder) NS ns1.foobar.com
----- (same as parent folder) NS ns2.foobar.com
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now