In message <cef5d429141640a98f49787ba7583...@netadmin.bart.gov>, "Mike Bernhardt
" writes:
> I have a domain and a subdomain which is delegated by the
>
> I am trying to figure out the correct way to have the slave of a parent
> domain look up hosts in a subdomain managed by others. I'm running BIND
> 9.8.1-P1. The current working configuration for the subdomain is this:
>
> options {
> directory "/var/named";
> allow-recursion { any; };
> allow-query { any; };
> allow-query-cache { any; };
> forwarders { 148.165.3.10; };
> forward only;
> recursive-clients 2000;
> zone-statistics yes;
> };
>
> zone "domain.com" {
> type slave;
> masters { 10.130.1.30; };
> file "db.domain";
> forwarders { };
> };
>
> But using "forwarders" doesn't seem like the correct way to do it.
Well it is a correct way to do it. It turns *off* the global
override on normal resolution for the name space covered by domain.com.
I normally use "forwarders { /* empty */ };" so that it is easier
to see that it is supposed to be a empty list.
> It's in
> the options in order to forward internet queries to our external name server
> instead of to the root servers, which aren't accessible from inside. I've
> been messing with stub zones but that doesn't seem to work:
>
> zone "domain.com" {
> type slave;
> masters { 10.130.1.30; };
> file "db.domain";
> };
> zone "subdomain.domain.com" {
> type stub;
> masters { 10.2.241.101; 10.2.242.222; };
> file "db.subdomain";
> };
>
> With this configuration, the zone file for subdomain.domain.com is correctly
> created but when I run tcpdump I can see that queries for
> host.subdomain.domain.com are being forwarded to 148.165.3.10, not to the
> subdomain name servers. The result of course is NXDOMAIN.
>
> With forwarders set for the zone domain.com, the slave queries the zone
> master, which then queries the subdomain name server as it should. So the
> stub zone is apparently being ignored.
>
> What is wrong? Perhaps I'm misunderstanding the purpose of stub zones? Let
> me know if you need additional config details.
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
