Unless you have some reason to use the reverse lookup zone from your test.com…I’d leave the reverse lookup zones in the ad.test.com (integrated) since all of your computers are already pointing to ad.test.com for resolution and you’ve delegated ad.test.com (integrated as well). 

Configure conditional forwarding for All other DNS domains to point to at least two of your BIND servers and check the Do not use recursion for this domain (I’m sure you don’t want to have your internal DC’s roaming the internet for name servers)…

 

My penny worth…

 

-vC

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, October 17, 2006 12:16 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Reverse lookup Zone (Integration with Bind and AD-DNS)

 

Hello all,
  
Here is the scenario:
  
Bind DNS 9.2 - test.com
Active Directory integrated-DNS - ad.test.com (delegated sub domain)
Ad.test.com configured to forward to test.com DNS servers
All clients point to ad.test.com DNS servers
   
   
What has been the overall consensus as it relates to placement of
reverse lookup zones in this config?  I have typically left the

reverse lookup zones in the root in this situation (test.com).  
   
Tia,

RC

Reply via email to