• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 285
  • Last Modified:

How to I convert an A record to an NS record in Windows 2003 Server?

How do I do this in Windows 2003 Server?

Currently your DNS likely has an A record for the forums that looks something like this
forum IN A 123.123.123.123
We would like you to change that to two NS records that will look like this:
forum IN NS ns1.foobar.com
forum IN NS ns2.foobar.com
0
snoopspecial
Asked:
snoopspecial
  • 7
  • 6
  • 2
1 Solution
 
LegendZMPrincipal Security ArchitectCommented:
You don't create NS records in DNS... you create a zone

Open the DNS snapin, rightclick the server icon in the tree, and click new Zone, this will make a new authoratative zone for whatever domain you're trying to control. Then you specify the name server on the domain registrar to be that of your DNS server.

http://www.informit.com/articles/article.aspx?p=405516

0
 
Melih SARICACommented:
dns file types r near_y the same..
syntax is same.. (A , Cname etc )

but.. in windows u can do it in DNS mmc snapin.. or with  dnscmd  tool

Melih SARICA
0
 
snoopspecialAuthor Commented:
so for example, if I have foo.com
and the want me to have forum.foo.com then I should create a new zone called that?
I've tried this too - but after I do this, and try to ping the DNS name, it can't find anything.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LegendZMPrincipal Security ArchitectCommented:
Yes, you would create a zone called forum.foo.com and in there create an A record, leave the name blank, and for IP enter the IP of the site.  
so if forum.foo.com is  1.1.1.1

make a zone forum.foo.com
add an A record with no name and an ip of 1.1.1.1
0
 
snoopspecialAuthor Commented:
so now I have the following:

Forward Zones

foo.com
forum.foo.com
---(same as parent folder) NS ns1.foobar.com
---(same as parent folder) NS ns2.foobar.com   (note, FOOBAR, not FOO)
---(same as parents folder) SOA ns1.foobar.com, hostmaster.foobar.com

Is this right?

So when I ping forum.foo.com - it should go to ns1.foobar.com and get the IP for the server. At the moment, the ping is not working.
0
 
Melih SARICACommented:
ney snoopp..

if u ave a foo.com  domain...
just right click it and select add A host from the popup menu

Write forum on host name then ip and its ok...

u dont need to create a new zone for forum.foo.com

Melih SARICA
0
 
LegendZMPrincipal Security ArchitectCommented:
You need to create an A record as well within each zone pointing to that zone's IP, leave the name in the A record blank.

Rigth click the zone, new Host "A", type nothing for the name, and type the IP of the actual server

then you can point the Name server to the IP address of that DNS srever.
0
 
LegendZMPrincipal Security ArchitectCommented:
@ non_zero

You will need to create a new zone if you want to be authoratative for that sub domain and add lower level sub domains which i believe is what snoop is trying to do.
0
 
snoopspecialAuthor Commented:
So LegendZM:

When I do that, I get this from the ping?

nslookup> ping forum.foo.com

Server: forum.foo.com
Address:  1.1.1.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.


Does that mean that the new DNS server don't have a record for my record?
0
 
LegendZMPrincipal Security ArchitectCommented:
go to command prompt type ipconfig /flushdns

I don't think you can ping from an nslookup prompt?

make sure that your DNS on your Tcp/ip properties is also pointed to your dns server.
0
 
snoopspecialAuthor Commented:
@ LegendZM in re: non_zero

Correct. I want the forum.foo.com DNS to be handled by an outside DNS server, not the same ones that control my foo.com
0
 
LegendZMPrincipal Security ArchitectCommented:
So right now foo.com DNS is handled by you internally on windows and you wan tforum.foo.com to be handled by another DNS server outside your org / control?
0
 
snoopspecialAuthor Commented:
i did the flushdns... no change..
i pinged from the cmd prompt ... i get the 1.1.1.1

the point of the FOOBAR dns server is so that the hosting company can change the IP at will without relying on my server to be out of date.

If i replace 1.1.1.1 with a fixed IP, doesn't that defeat the point of having them resolve the final address for forum.foo.com? Before I was doing that essentially by have an A record in my foo.com for forum.foo.com is a 123.123.123.123
0
 
snoopspecialAuthor Commented:
Right...

So.. I am handling foo.com on Windows 2003 Standard
I had a record for forum.foo.com is a 123.123.123.123 (not my IP range)

my hosting company said, remove the A record, and create an NS for forum.foo.com so that it points to their NS servers.
Then they can resolve forum.foo.com with an IP from their range.
0
 
snoopspecialAuthor Commented:
so I am getting somewhere now.

1. Added forum to the foo.com as a new delegation
(rather than creating a new zone).

2. Then I can add two NS servers for the new foobar.com site.

This seems to work so far and ping is working, but they are checking on their side if the IP is correct (which it doesn't appear to be).

So the tree looks like this now:

foo.com
-- _msdcs
-- _sites
-- _tcp
-- _udp
-- DomaindDNSZones
-- ForestDNSZones
-- forum
-- (2 records)
----- (same as parent folder) NS ns1.foobar.com
----- (same as parent folder) NS ns2.foobar.com
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 7
  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now