DNS config question: does a server that is outside of my domain have any business being listed as a nameserver?

I am in the process of configuring three DCs to serve several load-balanced IIS boxes.  

I first started this config two years ago. My config was only partially successful. I'm finally fixing things, but I'm having to clean up my old work, some of which were stopgap measures.

My three DCs are replicating their zones to one another. Looking at the forward lookup zones I notice that there is an instutional machine listed as a nameserver. This is outside of my domain. We probably did this as some stopgap DNS redundancy way back when. Probably doesn't matter one way or another, but I doubt it is even a Windows machine.

I am wondering if it has any business being there or if I should delete this external Nameserver.
WIll it cause harm/misconfiguration? Will it help?
Is there anything "tricky" to know about deleting it, or can I just kill the extra nameserver using the DNS GUI?

Thanks.


LVL 6
kennethfineAsked:
Who is Participating?
 
ChiefITCommented:
There are places to check for outside servers that you probably don't want in your configurations.

1) each server and NICs list of prefered DNS servers
2) the router's list of internal DNS servers.

The only place that is really a good practice to configure outside servers is DNS forwarders. Even then, that's only if you use recursion. Root hints comes pre conigured with public DNS servers. So, you don't have to configure root hints.

The link below will tell you the chronology of a DNS query: This might help you see why forwarders would be the only real good spot for outside servers.

http://www.experts-exchange.com/Networking/Protocols/DNS/Q_23204162.html
0
 
ChiefITCommented:
Oh yes, add to the list:

3) DHCP configuration.
0
 
andyalderCommented:
RFC2182 says you should have geographically and topoligically dispersed secondary nameservers, not that it really matters for small domains.

What the DNS GUI lists may be immaterial, you need to check your DNS from the root-servers using NSlookup (or get www.checkdns.net to do it for you).
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.