Solved

what is the correct DNS Forwarding configuration ??

Posted on 2011-09-28
6
225 Views
Last Modified: 2012-05-12
Good morning

im in windows domain environment and i have couple of DNS servers on the network

my question is what is the correct DNS forwarding ORDER configuration , should my ISP DNS on top then my local or the opposite ?

and what other configuration make the resolving faster ????

0
Comment
Question by:F_A_H_D
  • 3
  • 2
6 Comments
 
LVL 3

Author Comment

by:F_A_H_D
ID: 36813053
sorry
 should i put my local secondary DNS on top or the ISP DNS ?
0
 
LVL 1

Expert Comment

by:archmuk
ID: 36813315
For internal  name resolution, Local DNS should be the first one.
The internal DNS should forward the request to the extrenal DNS (ISP DNS in your case) only for the names it cant resolve.
0
 
LVL 3

Author Comment

by:F_A_H_D
ID: 36814143
so in order i should put
1- local DNS
2- ISP DNS

??
0
The New “Normal” in Modern Enterprise Operations

DevOps for the modern enterprise offers many benefits — increased agility, productivity, and more, but digital transformation isn’t easy, especially if you’re not addressing the right issues. Register for the webinar to dive into the “new normal” for enterprise modern ops.

 
LVL 1

Expert Comment

by:archmuk
ID: 36814261
Actually the internal client should point toward internal DNS.
The Internal DNS should forward the DNS requests to external DNS. (Configure here:  on your DC : DNS ..Your DC name... Properties...Forwarders) Add the external DNS here
0
 
LVL 26

Expert Comment

by:DrDave242
ID: 36817849
In case this is still unclear, all of your domain-joined machines should use ONLY your internal DNS servers.  If you have a multi-site environment, machines at a given site should use at least one internal DNS server that is local to them before using a server at a different site (so the local server would be their preferred server, and a server at a different site could be used as an alternate).

ISP DNS servers should only be configured as forwarders on the internal DNS servers, and the internal servers should never be configured to forward to each other unless you've got more than one domain in your environment.  In that case, conditional forwarders should be used.
0
 
LVL 1

Accepted Solution

by:
archmuk earned 500 total points
ID: 36864246
Just elaborating @DrDave242 comment:
Lets say your domain name is company.com which is configured on server IP a.b.c.d
and your ISP DNS is p.q.r.s
DNS entry on your clients of that domain should point to a.b.c.d
But on the Server a.b.c.d, you should point the forwarders to p.q.r.s
This way the client do the internal name resolution from the internal dns a.b.c.d but for extrernal name resolution go to p.q.r.s.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RRAS AND DNS 15 61
VMware 6.0 3 82
Exchange 2010:  Outlook client disconnected after power outage. 10 54
PHP website on Linux - server DNS address could not be found. 18 48
If you have a multi-homed DNS setup in windows, you can have issues with connectivity to the server that hosts the DNS services (or even member servers of your domain if this same DNS server is a DC). This is because windows registers all of its IPs…
There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question