[ActiveDir] OT: DNS external

[Parker, Edward]

Title: Message

Public DNS service:   Does your SOA (primary DNS server) have to be accessible to the internet.  Could you have your primary DNS server be completely blocked by a firewall from the internet.  However configure both your secondaries to respond to internet requests.  I could remove the NS record for the primary, so it appears that there are only two DNS servers for this zone.   Any thoughts?