Avatar of drichman
drichman
Flag for United States of America asked on

How do I move from using a conditional forwarder to a forward lookup zone for a limited number of host records?

How do I move from using a conditional forwarder to a forward lookup zone for a limited number of host records?

To expand, I host AD integrated DNS for our domain (xyz.com), but we also need to lookup addresses for our parent company (abc.com). I currently have a conditional forwarder for them pointing to their internal DNS servers, which works fine. They now need me to add a A record for a service that has both an internal and external IP address (i.e. 192.168.1.100 internal and 23.23.23.5 external). When my users resolve the address, they get the internal IP address of the server, but we want them to connect to the external IP address.

I was thinking of just deleting the conditional forwarder reference and adding a forward lookup zone for abc.com, and then adding the A record for that server with the external address, but I am concerned that it will stop all other resolution for other abc.com services (due to the loss of the conditional forwarders pointing to their internal DNS server). Do I resolve this problem by adding their internal DNS server to the Forward lookup zone>Properties>Name Servers tab?
Windows Server 2012DNSActive Directory

Avatar of undefined
Last Comment
kevinhsieh

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Cliff Galiher

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Pete Long

If you have a Cisco ASA firewall you can re-write the DNS reply to change it to the internal IP (DNS Doctoring)

P
kevinhsieh

Cliff's answer is what I would propose also.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23