Re: Problem with forward zone in view

2013-09-08 Thread Joseph S D Yao
On 2013-09-08 07:06, Carol Overes wrote: Hi Phil, Apologies if my approach was not clear, after Steve's mail. But I tested by using dig without the +trace option. I have tested the following from an IP, which is accepted via the trusted ACL: dig @10.10.10.1 www.domain2.com A dig @10.10.10.1

Re: Problem with forward zone in view

2013-09-08 Thread Steven Carr
On 8 September 2013 12:06, Carol Overes wrote: > Apologies if my approach was not clear, after Steve's mail. But I tested > by using dig without the +trace option. I have tested the following from > an IP, which is accepted via the trusted ACL: > > dig @10.10.10.1 www.domain2.com A > dig @10.10.10

Re: Problem with forward zone in view

2013-09-08 Thread Carol Overes
Hi Phil, Apologies if my approach was not clear, after Steve's mail. But I tested by using dig without the +trace option. I have tested the following from an IP, which is accepted via the trusted ACL: dig @10.10.10.1 www.domain2.com A dig @10.10.10.1 domain2.com NS And directly from the internal

Re: Problem with forward zone in view

2013-09-08 Thread Phil Mayers
On 09/08/2013 11:38 AM, Carol Overes wrote: Hi Steve, Thanks for your reponse. On Sun, Sep 08, 2013 at 10:57:15AM +0100, Steven Carr wrote: You will need to perform a packet capture on the DNS server itself, from a client they query for records in domain2.com and then analyse the packet captur

Re: Problem with forward zone in view

2013-09-08 Thread Carol Overes
Hi Steve, Thanks for your reponse. On Sun, Sep 08, 2013 at 10:57:15AM +0100, Steven Carr wrote: > You will need to perform a packet capture on the DNS server itself, > from a client they query for records in domain2.com and then analyse > the packet capture to see what happened when the query cam

Re: Problem with forward zone in view

2013-09-08 Thread Steven Carr
Using +trace will give you the exact response you are seeing. +trace uses the values returned by the parent for the next part of the query (it will bypass your internal DNS server and go straight to the Internet root and work down the hierarchy, so any forwarding rules in BIND are ignored). You wi

Problem with forward zone in view

2013-09-08 Thread Carol Overes
All, I have tried to search on the web for a solution for the following problem, but I didn succeed. My goal: I run an internal DNS server ('10.10.10.1'), which is authoritive for an internal domain ('domain1.com'), and allows recursion for internal networks. We have another internal nameserver (