?
Solved

Need some help with split DNS

Posted on 2014-03-05
5
Medium Priority
?
334 Views
Last Modified: 2014-04-21
I am not the best at DNS, but here goes. In our gateway I specify the DNS as to use 8.8.8.8 and 4.2.2.2. My first question is, is this best practice? I have a Windows environment, and one of my servers has DNS installed for local lookups.

I am asking this question because while on the office wifi, corporate e-mail doesnt work. My DNS is not set up as .local, it is set up as the external domain name. While researching a fix for this issue, it recommends setting up split DNS. To do this, I would need to set up a new forward primary zone that is not AD integrated. My second question is what effect(s) will this have on my domain PC's?
0
Comment
Question by:j_crow1
5 Comments
 
LVL 4

Expert Comment

by:Jason Ryberg
ID: 39907968
Why is the office wifi set to point to your mail's external domain?  If it's connected to your LAN, it should use the internal DNS server.
0
 

Author Comment

by:j_crow1
ID: 39908061
It's not; the Aps use the same DNS setup as the internal office machines. It's the phones that look at the external mail address.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 39908995
try using your office dns server's IP as primary dns and keep 8.8.8.8 / 4.2.2.2 as alternate dns on one of the computer to see if it works.
0
 
LVL 4

Expert Comment

by:Jason Ryberg
ID: 39909650
In our gateway I specify the DNS as to use 8.8.8.8 and 4.2.2.2

On your DNS servers, do you have forwarders pointing to the gateway as a DNS source?  Otherwise you could set forwarders to the 8.8.8.8 and 4.2.2.2 IP addresses.  Is there a reason you're not using your ISP's DNS?
0
 
LVL 27

Accepted Solution

by:
DrDave242 earned 1500 total points
ID: 39912869
In our gateway I specify the DNS as to use 8.8.8.8 and 4.2.2.2.
Is that gateway also the DHCP server for your network? If so, then it's likely giving those DNS server addresses out to DHCP clients, which isn't good if you've got an AD domain in place (and it sounds like you probably do).

All machines in an AD domain need to use only internal DNS servers (DNS servers in your domain, which are typically going to be domain controllers), because those are the only DNS servers that know anything about the machines in your domain. Using external DNS servers such as 8.8.8.8 and 4.2.2.2 will result in machines in your domain not being able to contact other machines in your domain.

I am asking this question because while on the office wifi, corporate e-mail doesnt work. My DNS is not set up as .local, it is set up as the external domain name.
Can you be more specific about this? What do you use for corporate email, and does your AD domain have the same name as your registered internet domain? If so, that's not ideal, but there's probably still a way to make everything work like it should.
0

Featured Post

What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question