Exclude Certain DNS Records From Propogating Across to RODC
Posted on 2014-10-28
Our main office is home to our AD and DNS Servers. We are still using a .local for our AD (Unfortunately) so we have a .local as well as our .com as Forward Lookup Zones. For the .com zone, we have our public facing servers resolving to their internal IP.
Now that we have a branch office with a RODC, this is causing an issue for us. We have an MPLS that is routing most of the office traffic except for our DMZ subnet. Because this is not routing (and I dont think we want to at this point) and the RODC is resolving an internal IP, the branch office users cannot reach the DMZ Servers.
Is there any way to have those particular records for the DMZ on the RODC be different or not replicate over at all from the primary domain controller to the RODC? I would like those particular records to resolve over public DNS.