On Jun 17, 2009, at 3:51 AM, Braebaum, Neil wrote:
What I was hoping to do was create, or perhaps more correctly, cater for a specific and small number of records for example.com. (by DNAME'ing to example2.com.) internally, by creating a very simple zone with the DNAME to example2.com. - merely to provide answers for these resource records,
that I don't want - nor are relevant - to the external use of
example.com.

example.com. is known on the internet, provided by a managed service DNS
provided, and hosts some ecom related DNS records. I'm kind of being
forced down the track of providing some resolution for some specific
records (the resource records I've given examples for) internally
(because of the domain name used for some email addresses), but I don't want to provide a fully authoritative zone for example.com. internally,
because I don't want to have to maintain duplicate records in an
internal example.com. authoritative zone, and for the external
example.com. zone, and because I don't want to have to maintain or
expose these resource records in my external example.com. zone.


Setting aside the DNAME record, what you're trying to accomplish is something frequently requested - a private overlay on an otherwise public zone that doesn't obscure the public zone. But it doesn't work the way you want - a server that is authoritative for a zone is fully authoritative for that zone - positively and negatively.

The only way to accomplish what you want would be to create one or more private zones for subdomains of example.com, to cover the names that need to resolve privately without obscuring the public data for example.com. For example, you could create _tcp.example.com - I'd be willing to bet that this subdomain does not exist in the public namespace. You could then DNAME this to _tcp.example2.com, or you could explicitly create the CNAME records you want to have.

Chris Buxton
Professional Services
Men & Mice

_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to