Oh, I thought this was an external-versus-internal scenario. But, this is even easier.

A) One of the nameservers (pick DNS1 or DNS2) becomes a slave (of the "stealth" variety, if you want) of the other
B) People use nsupdate to maintain the zone

For security, TSIG-sign the updates. For fast change propagation, set up NOTIFY if and as necessary.

                                                                - Kevin

On 4/30/2014 4:32 PM, Jeronimo L. Cabral wrote:
Dear John, this is my scenario:

1) Office 1: people work with some machines and fill up a local master zone "company.com <http://company.com>" with records in DNS1 2) Office 2: people works with some others machines and fill up a local master zone "company.com <http://company.com>" with another records in DNS2

So both office have a different master zone.

Both offices belong to the same company, so I need that any client PC can resolve a hostname from "company.com <http://company.com>" domain, independently if this record is in DNS1 or DNS2.

Thanks again, regards.

JeLo



On Wed, Apr 30, 2014 at 5:21 PM, John Miller <johnm...@brandeis.edu <mailto:johnm...@brandeis.edu>> wrote:

    Hi Jeronimo,

    First of all, please just tell us the real domain. Yes, we could
    try and talk about a fictitious "example.com <http://example.com>"
    or "company.com <http://company.com>," but having the real domain
    name lets us actually query your nameservers.

    Let me be sure I understand: you have two DNS servers.  Each of
    them is authoritative for the same domain.  Are both set as master?

    The two servers have different copies of the zone--what's your
    reason for that?

    If both servers think they are authoritative for a zone, then they
    will answer recursive queries for those zones themselves.  From
    the manual:

    "Forwarding occurs only on those queries for which the server is
    not authoritative and does not have the answer in its cache."

    What exactly are you trying to achieve?

    John



    On Wed, Apr 30, 2014 at 3:55 PM, Jeronimo L. Cabral
    <jelocab...@gmail.com <mailto:jelocab...@gmail.com>> wrote:

        Dear, I would like to ask for solution related with DNS (bind)
        configuration to allow forward requests to another DNS but
        related with the same domain.

        I'm asking about two authoritative name servers serving the
        same domain but with different zone file info on each and have
        one of them forward recursive queries to another one if first
        one cannot find some particular subdomain record that is
        missing in his version of zone file.

        My named.conf.local is as follow, but it doesn't work:

        zone "company.com <http://company.com>" {
            type master;
            file "/etc/bind/zones/company.com.db";
        allow-transfer { key "company"; };
            check-names ignore;
            forward first;
            forwarders { 172.16.1.1; };
        };

        Thanks a lot,

        JeLo


        _______________________________________________
        Please visit https://lists.isc.org/mailman/listinfo/bind-users
        to unsubscribe from this list

        bind-users mailing list
        bind-users@lists.isc.org <mailto:bind-users@lists.isc.org>
        https://lists.isc.org/mailman/listinfo/bind-users




-- John Miller
    Systems Engineer
    Brandeis University
    johnm...@brandeis.edu <mailto:johnm...@brandeis.edu>
    (781) 736-4619

    _______________________________________________
    Please visit https://lists.isc.org/mailman/listinfo/bind-users to
    unsubscribe from this list

    bind-users mailing list
    bind-users@lists.isc.org <mailto:bind-users@lists.isc.org>
    https://lists.isc.org/mailman/listinfo/bind-users




_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to