Link to home
Start Free TrialLog in
Avatar of IT Guy
IT GuyFlag for United States of America

asked on

Need instructions on how to set up a split DNS

Need instructions on how to set up a split DNS.

Currently traffic originating within our internal network is being redirected out onto the internet before it reaches its destination which is also on the internal network.

I need to know how to set up a split DNS that will fix this issue.

How can this be done?

The Server OS is Windows Server 2008 R2
Avatar of p_nuts
p_nuts
Flag of Netherlands image

just point your clients to the local dna server and set it up to forward requests to the arpa servers.

that way clients will first get internal dns. if that dont work dna will forward the requests to the arpa servers.
Avatar of IT Guy

ASKER

Can anyone give me more detailed instructions on how to set up a split DNS zone?
sorry, its getting late so i might be missing something...

i wouldnt have thought you needed to do anything special to your DNS config, it sounds more like a user config problem.

is your DNs server on the same subnet as the client thats making the request?
when you type in ipconfig/all into a command prompt are you presented with your internal DNS server first?

if the target is a web address you need to make sure you have the correct pointer record in your own DNS configuration, containing the internal IP, otherwise, your DNS server will runn off to the internet first to get it.  for instance if your target is www.website.com, that destination has 2 IP's, 1 internal and 1 external.  you need to make sure you have a pointer record for that entry in your internal dns, pointing to the internal IP.

hope im making sense.
Avatar of IT Guy

ASKER

is your DNs server on the same subnet as the client thats making the request? Yes.
when you type in ipconfig/all into a command prompt are you presented with your internal DNS server first? Yes.
The primary DNS server IP address is the IP address of my company's internal DNS server.
The secondary and third IP address are IP addresses of DNS servers out on the internet.

The problem is that if we remove the external IP addresses of the DNS servers on the internet, (although this fixes the problem with network traffic not being routed out to the internet) then the client computers are unable to connect to any internet webpages.

I had initially planned to try to fix this problem by setting up a Windows Server 2008 R2 proxy server, but when I researched on how to do this, I discovered that Windows 2008 R2 does not have any way being set up as a proxy server unless a special third party application is installed to do this.

So, I was advised to set up a split DNS zone, which is what I am asking for help on how to do.
aha!  dont have your secondary DNS as the internet DNS server...

instead there is an error on your DNS configuration.

in DNS, rightclick on the server and select properties, change the tab to "forwarders" and in the bottom section type in your internet DNS server IPs, that should work
ASKER CERTIFIED SOLUTION
Avatar of BBGN
BBGN
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial