Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
On 03/11/2023 20:07, Marco M. wrote: Am 03.11.2023 um 19:54:32 Uhr schrieb Nick Howitt: How do you mean remove the zone information? In your /etc/bind are configuration files. Look for named.conf* and find those that include zones: zone "f.8.1.1.0.7.1.0.1.0.a.2.ip6.arpa" { type master;

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
a sadly normal implementation but yes you can do better* Views is a good place to look https://kb.isc.org/docs/aa-00851 * Make sure to investigate how the company VPN services handle DNS as it may surprise you On Fri, Nov 3, 2023 at 9:52 AM Nick Howitt via bind-users wrote: Hi, I am fairly new

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
On 03/11/2023 17:54, Marco M. wrote: Am 03.11.2023 um 17:48:32 Uhr schrieb Nick Howitt via bind-users: My problem is the use of external IP's duplicated between the internal and external masters for some IPs/FQDNs which I want to get rid of. Implement IPv6 and get rid of the old IPv4

How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
Hi, I am fairly new to bind but I am thinking my company's use of it is sub-optimal. We have two bind masters (and a few slaves), one for internal use so all our internal servers point to it or its slaves as their DNS resolvers. I will call the internal one bind-internal and the external one

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
On 03/11/2023 17:17, Marco M. wrote: Am 03.11.2023 um 15:51:32 Uhr schrieb Nick Howitt via bind-users: As this site is externally accessible as well, we also have to put an identical entry in bind-external so we end up having many identical entries in bind-internal and bind-external. It seems

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
On 03/11/2023 18:06, Marco M. wrote: Am 03.11.2023 um 17:58:51 Uhr schrieb Nick Howitt via bind-users: On 03/11/2023 17:54, Marco M. wrote: Am 03.11.2023 um 17:48:32 Uhr schrieb Nick Howitt via bind-users: My problem is the use of external IP's duplicated between the internal and external

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
for Android <https://aka.ms/AAb9ysg> *From:* bind-users on behalf of Nick Howitt via bind-users *Sent:* Friday, November 3, 2023 1:58:51 PM *To:* bind-users@lists.isc.org *Subject:* Re: How should I configure in

Re: How should I configure internal and external DNS servers

2023-11-03 Thread Nick Howitt via bind-users
On 03/11/2023 19:30, Marco M. wrote: Am 03.11.2023 um 19:18:49 Uhr schrieb Nick Howitt via bind-users: Can the bind-internal not be made to caching only and not authoritative? If so, how? Of course it can, simply remove the zone configuration, but it will then cache the records from

Re: How should I configure internal and external DNS servers

2023-11-04 Thread Nick Howitt via bind-users
e options this needs to be included. It may turn out that there is an easier way to achieve your goal that doesn't use BIND. I'm sure there are other options that I haven't thought of, but hopefully you might find these ideas useful? Nick. On 4/11/23 04:51, Nick Howitt via bind-users wrote: H

Re: How should I configure internal and external DNS servers

2023-11-04 Thread Nick Howitt via bind-users
As on other replies, a different internal zone is a huge project for the company, not a quick win, unfortunately. On 04/11/2023 08:55, Michael Richardson wrote: Given VPNs, RemoteAccess and the like, I strongly recommend against split-DNS configurations. They were great ideas in 1993, when

Re: How should I configure internal and external DNS servers

2023-11-04 Thread Nick Howitt via bind-users
ote: > * That sounds like a sadly normal implementation but yes you can do > better* Views is a good place to look https://kb.isc.org/docs/aa-00851 > * Make sure to investigate how the company VPN services handle DNS as > it may surprise you > > On Fri, N