On 2013.05.08 13.20, Steven Carr wrote:
On 8 May 2013 18:09, <wbr...@e1b.org> wrote:
This just came up with a site I support. Thanks to this list and the
DNS-OARC list, I know better. Hopefully, I can redirect them to use
something below their real domain for Active Directory such as
ad.example.org.
FWIW: MS now advises not to use .local for internal AD anymore. They
suggest you use your owned/registered namespace to prevent domain
collisions.
http://support.microsoft.com/kb/909264
Generally, we recommend that you register DNS names for internal and
external namespaces with an Internet registrar... Registering your DNS
name with an Internet registrar may help prevent a name collision.
it's also mildly humorous that they used to quite religiously endorse .local, in some
documents even categorizing use of the same domain name on an internal and external
network as a "security risk".
-ben
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
