DNS Forwarding between domains with NO trust

Howdy All,

I have 2 domains with separate DNS servers. there is no trust between the two domains. only one of the domains has access to public DNS. The other domain is setup to use the first's DNS servers as forwarders. since there is no trust is there any special configuration need?
LVL 2
Ben StirlingOperations Technology AnalystAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Joshua GrantomSenior Systems AdministratorCommented:
not if you have the conditional forwarders setup the way you want them to be.
0
Ben StirlingOperations Technology AnalystAuthor Commented:
The way this is setup (BTW Not my idea) is a chain of forwarders. domain 1 forwards to public, domain 2 forwards to domain 1.
0
Joshua GrantomSenior Systems AdministratorCommented:
That will work, domain 2 will be able to do local lookups through domain 2, and local domain 1 lookups and public lookups through domain 1
0
ON-DEMAND: 10 Easy Ways to Lose a Password

Learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees in this on-demand webinar. We cover the importance of multi-factor authentication and how these solutions can better protect your business!

Ben StirlingOperations Technology AnalystAuthor Commented:
domain 2 will not resolve domain 1 DNS as a forwarder. please note that this does not look like a network issue AKA the packets seem to be getting to domain 1 DNS but i does not look like it is responding.
0
Joshua GrantomSenior Systems AdministratorCommented:
have you flushed the dns on domain 2 DNS server?

the conditional forwarder from domain 2 has the domain company1.com forwarding to domain 1 correct?
0
Ben StirlingOperations Technology AnalystAuthor Commented:
just fyi. domain 2 DNS is allowed to send port 53 UDP / TCP traffic to domain 1 DNS. no other traffic if passed between them.
0
Ben StirlingOperations Technology AnalystAuthor Commented:
I have flushed the DNS as well as disabled EDNS
0
Ben StirlingOperations Technology AnalystAuthor Commented:
Domain 2 DNS has no info on domain 1 DNS save to use it as a forwarder
0
Joshua GrantomSenior Systems AdministratorCommented:
you will need to allow domain 1 pass traffic back to domain 2 for responses
0
Ben StirlingOperations Technology AnalystAuthor Commented:
when domain 2 sends domain 1 a DNS query to opens a session in the firewall and domain 1 is allowed to respond but not open a connection of its own
0
Joshua GrantomSenior Systems AdministratorCommented:
I'm curious to see how your Conditional forwarding is setup.
0
Ben StirlingOperations Technology AnalystAuthor Commented:
there are no Conditional forwards. domain 2 doesn't need DNS about domain 1 it only needs public DNS info forwarded via domain 1.
0
Joshua GrantomSenior Systems AdministratorCommented:
Oh, you are right, that makes no sense. If Domain 1 does not need to look up anything for Domain 2 then why use it for DNS at all with domain 2?
0
Ben StirlingOperations Technology AnalystAuthor Commented:
Again NOT My idea, however there are reasons why domain 2 is not allowed to reach to public DNS.
0
Ben StirlingOperations Technology AnalystAuthor Commented:
The issue was with the firewalls between the DNS servers. The transparent proxy caused issues.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ben StirlingOperations Technology AnalystAuthor Commented:
I found the resolution.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.