Solved

what is the correct DNS Forwarding configuration ??

Posted on 2011-09-28
6
237 Views
Last Modified: 2012-05-12
Good morning

im in windows domain environment and i have couple of DNS servers on the network

my question is what is the correct DNS forwarding ORDER configuration , should my ISP DNS on top then my local or the opposite ?

and what other configuration make the resolving faster ????

0
Comment
Question by:F_A_H_D
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 3

Author Comment

by:F_A_H_D
ID: 36813053
sorry
 should i put my local secondary DNS on top or the ISP DNS ?
0
 
LVL 1

Expert Comment

by:archmuk
ID: 36813315
For internal  name resolution, Local DNS should be the first one.
The internal DNS should forward the request to the extrenal DNS (ISP DNS in your case) only for the names it cant resolve.
0
 
LVL 3

Author Comment

by:F_A_H_D
ID: 36814143
so in order i should put
1- local DNS
2- ISP DNS

??
0
Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

 
LVL 1

Expert Comment

by:archmuk
ID: 36814261
Actually the internal client should point toward internal DNS.
The Internal DNS should forward the DNS requests to external DNS. (Configure here:  on your DC : DNS ..Your DC name... Properties...Forwarders) Add the external DNS here
0
 
LVL 26

Expert Comment

by:DrDave242
ID: 36817849
In case this is still unclear, all of your domain-joined machines should use ONLY your internal DNS servers.  If you have a multi-site environment, machines at a given site should use at least one internal DNS server that is local to them before using a server at a different site (so the local server would be their preferred server, and a server at a different site could be used as an alternate).

ISP DNS servers should only be configured as forwarders on the internal DNS servers, and the internal servers should never be configured to forward to each other unless you've got more than one domain in your environment.  In that case, conditional forwarders should be used.
0
 
LVL 1

Accepted Solution

by:
archmuk earned 500 total points
ID: 36864246
Just elaborating @DrDave242 comment:
Lets say your domain name is company.com which is configured on server IP a.b.c.d
and your ISP DNS is p.q.r.s
DNS entry on your clients of that domain should point to a.b.c.d
But on the Server a.b.c.d, you should point the forwarders to p.q.r.s
This way the client do the internal name resolution from the internal dns a.b.c.d but for extrernal name resolution go to p.q.r.s.
0

Featured Post

Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most DNS problems are VERY easily troubleshot and identifiable if you can follow the steps a DNS query takes. I would like to share the step-by-step a DNS query takes from the origin to the destination. _____________________________________________…
Resolve DNS query failed errors for Exchange
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question