[PLUG] DNS Forwarder configuration

["Neill R" <neill@nsyd.com>]

Hi everyone,

 

I have an internal bind 9.2 name server - 10.10.5.33 which is the primary NS for dozens of client systems. The server is setup in such as way where it is authorative for all client zones - such as client1.company.com, client2.company.com,  but for all other requests (like google.com) it forwards to our ISP's Name Server.

 

I recently ran into a situation where a new *compliant* client (client 3) does not want their zone files on the same machine as other client zones, so I decided we can setup a seperate name server on the client network -  10.10.20.33 and just setup a "type forward" zone entry on my primary NS for client3.company.com. I configured the compliant client zones and rolled out the new DNS server with no issues.  However, when I try to resolve client3.company.com via the primary NS I get no answer. Below is a sample of my primary NS named.conf. I have ruled out mosty all the obvious things, like network connectivity and access to the DNS ports, and DNS control ports.

 

Thanks in advance

 

-------------------------
 

 

 

//Global options

options {
        directory "/var/named/zones";
        query-source address 10.10.5.33;
        notify-source 10.10.5.33;
        transfer-source 10.10.5.33;
        listen-on {10.10.5.33; 127.0.0.1;};
        forwarders {198.6.1.2; 198.6.1.3;};
        forward only;
        //Allow zone transfers only to servers listed here.
        allow-transfer {10.10.15/24;
                        10.10.122.78;
                        10.10.129.84;};
        };

//Client 1 Zones
zone "client1.company.com" {type master; file "client1.company.com.zone";};

//Client 2 Zones
zone "client2.company.com" {type master; file "client2.company.com.zone";};

 //Client 3 Zones
zone "client3.company.com"    { type forward; forwarders {10.10.20.33;};  };
 

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug