Re: Enterprise DNS Architecture - AD and BIND

2016-12-15 Thread Barry S. Finkel
On 12/15/2016 8:16 AM, Bob Harold wrote: On Wed, Dec 14, 2016 at 1:41 PM, Veaceslav Revutchi > wrote: On Wed, Dec 14, 2016 at 10:35 AM, Barry S. Finkel > wrote: > On 12/14/2016

Re: Enterprise DNS Architecture - AD and BIND

2016-12-15 Thread Bob Harold
On Wed, Dec 14, 2016 at 1:41 PM, Veaceslav Revutchi wrote: > On Wed, Dec 14, 2016 at 10:35 AM, Barry S. Finkel > wrote: > > On 12/14/2016 Veaceslav Revutchi wrote: > > > >> Since this thread is still fresh, what is the

Re: Enterprise DNS Architecture - AD and BIND

2016-12-14 Thread Veaceslav Revutchi
On Wed, Dec 14, 2016 at 10:35 AM, Barry S. Finkel wrote: > On 12/14/2016 Veaceslav Revutchi wrote: > >> Since this thread is still fresh, what is the current best practice >> when slaving from AD? Do you pick one DC and list it as master or is >> it

Re: Enterprise DNS Architecture - AD and BIND

2016-12-14 Thread Barry S. Finkel
On 12/14/2016 Veaceslav Revutchi wrote: Since this thread is still fresh, what is the current best practice when slaving from AD? Do you pick one DC and list it as master or is it safe to list multiple? We are looking to do the same and just started the conversation

Re: Enterprise DNS Architecture - AD and BIND

2016-12-13 Thread Veaceslav Revutchi
- Kevin > > > -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry > S. Finkel > Sent: Friday, November 18, 2016 10:29 AM > To: bind-users@lists.isc.org > Subject: Re: Enterprise D

RE: Enterprise DNS Architecture - AD and BIND

2016-11-18 Thread Darcy Kevin (FCA)
ists.isc.org Subject: Re: Enterprise DNS Architecture - AD and BIND On Tue, 8 Nov 2016 16:09:36 -0800 Ray Van Dolson <rvandol...@esri.com> wrote: > Greetings; > > Am reviewing our DNS setup which has organically evolved over the > years and most certainly is due for an update: &

Re: Enterprise DNS Architecture - AD and BIND

2016-11-18 Thread Barry S. Finkel
On Tue, 8 Nov 2016 16:09:36 -0800 Ray Van Dolson wrote: Greetings; Am reviewing our DNS setup which has organically evolved over the years and most certainly is due for an update: - We have AD servers responsible for our primary domain (internally). - We have other

Re: Enterprise DNS Architecture - AD and BIND

2016-11-09 Thread Matus UHLAR - fantomas
On Wed, Nov 09, 2016 at 01:11:16AM +, Baird, Josh wrote: I'm not quite sure why you would have your caching servers forward to other DNS servers (Google, OpenDNS, etc). I would enable recursion on them and would not forward anything. I would also consider making these caching servers at

Re: Enterprise DNS Architecture - AD and BIND

2016-11-09 Thread Matus UHLAR - fantomas
On 08.11.16 16:09, Ray Van Dolson wrote: What I'm thinking: - Have an AD server at every location we have a BIND server. This way client machines talk DNS *only* to AD servers so Dynamic DNS & friends work reliably. AD servers would then forward to BIND servers as needed. This could

Re: Enterprise DNS Architecture - AD and BIND

2016-11-08 Thread Ray Van Dolson
slave your AD zones as well. > > Cheers, > > Josh > > -Original Message- > From: bind-users [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Ray > Van Dolson > Sent: Tuesday, November 8, 2016 7:10 PM > To: bind-users@lists.isc.org > Subject: Enterprise DNS

RE: Enterprise DNS Architecture - AD and BIND

2016-11-08 Thread Baird, Josh
@lists.isc.org Subject: Enterprise DNS Architecture - AD and BIND Greetings; Am reviewing our DNS setup which has organically evolved over the years and most certainly is due for an update: - We have AD servers responsible for our primary domain (internally). - We have other sets of AD servers

Enterprise DNS Architecture - AD and BIND

2016-11-08 Thread Ray Van Dolson
Greetings; Am reviewing our DNS setup which has organically evolved over the years and most certainly is due for an update: - We have AD servers responsible for our primary domain (internally). - We have other sets of AD servers responsible for other domains in DMZ's and such. - We have a