what is the correct DNS Forwarding configuration ??

Posted on 2011-09-28
Last Modified: 2012-05-12
Good morning

im in windows domain environment and i have couple of DNS servers on the network

my question is what is the correct DNS forwarding ORDER configuration , should my ISP DNS on top then my local or the opposite ?

and what other configuration make the resolving faster ????

Question by:F_A_H_D
  • 3
  • 2

Author Comment

ID: 36813053
 should i put my local secondary DNS on top or the ISP DNS ?

Expert Comment

ID: 36813315
For internal  name resolution, Local DNS should be the first one.
The internal DNS should forward the request to the extrenal DNS (ISP DNS in your case) only for the names it cant resolve.

Author Comment

ID: 36814143
so in order i should put
1- local DNS

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.


Expert Comment

ID: 36814261
Actually the internal client should point toward internal DNS.
The Internal DNS should forward the DNS requests to external DNS. (Configure here:  on your DC : DNS ..Your DC name... Properties...Forwarders) Add the external DNS here
LVL 26

Expert Comment

ID: 36817849
In case this is still unclear, all of your domain-joined machines should use ONLY your internal DNS servers.  If you have a multi-site environment, machines at a given site should use at least one internal DNS server that is local to them before using a server at a different site (so the local server would be their preferred server, and a server at a different site could be used as an alternate).

ISP DNS servers should only be configured as forwarders on the internal DNS servers, and the internal servers should never be configured to forward to each other unless you've got more than one domain in your environment.  In that case, conditional forwarders should be used.

Accepted Solution

archmuk earned 500 total points
ID: 36864246
Just elaborating @DrDave242 comment:
Lets say your domain name is which is configured on server IP a.b.c.d
and your ISP DNS is p.q.r.s
DNS entry on your clients of that domain should point to a.b.c.d
But on the Server a.b.c.d, you should point the forwarders to p.q.r.s
This way the client do the internal name resolution from the internal dns a.b.c.d but for extrernal name resolution go to p.q.r.s.

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Internet Business Fax to Email Made Easy - With  eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now