DNS server configuration: dig @localhost myserver NXDOMAIN

Question

Hi, I've tried to look in all topics, but I was not able to find any solution.
I'm installing a DNS service over a Mac OSX Server 10.6, but I'm still having lots of problems with the configuration.
While the forwarders works greatly, the internal zone do not works:
$ dig @localhost www.google.com
; <<>> DiG 9.6.0-APPLE-P2 <<>> @localhost www.google.com
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3652
$ dig @localhost myserver
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63100
$ dig @localhost -x 192.168.0.202
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30287
This is my configuration:
$ hostname
myserver.private
$ ifconfig
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
inet 192.168.0.202 netmask 0xffffff00 broadcast 192.168.0.255
$ tail /etc/dns/options.conf.apple
directory "/var/named";
forwarders { 208.67.222.222; 208.67.220.220; 192.168.0.1; };
allow-transfer { none; };
$ tail /etc/dns/publicView.conf.apple
acl "com.apple.ServerAdmin.DNS.public" {localnets;};
view "com.apple.ServerAdmin.DNS.public" {
//GUID=44FBB9A0-2F7F-4C09-ADD8-DD4615137B72;
allow-recursion {"com.apple.ServerAdmin.DNS.public";};
zone "private." {
type master;
file "db.private.";
allow-transfer {none;};
allow-update {none;};
zone "0.168.192.in-addr.arpa." {
type master;
file "db.0.168.192.in-addr.arpa.";
allow-transfer {none;};
allow-update {none;};
zone "." {
type hint;
file "named.ca";
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
$ tail /var/named/zones/db.private.zone.apple
$TTL 10800
private. IN SOA myserver.private. admin.private. (
2009111407 ;Serial
86400 ;Refresh
3600 ;Retry
604800 ;Expire
345600 ;Negative caching TTL
private. IN NS myserver
myserver IN A 192.168.0.202
$ tail /var/named/zones/db.0.168.192.in-addr.arpa.zone.apple
$TTL 10800
0.168.192.in-addr.arpa. IN SOA myserver.private. admin.private. (
2009111403 ;Serial
86400 ;Refresh
3600 ;Retry
604800 ;Expire
345600 ;Negative caching TTL
0.168.192.in-addr.arpa. IN NS myserver.private.
202.0.168.192.in-addr.arpa. IN PTR myserver.private.
Does anybody have any suggestion ?

Answer 1

Thanks Felix for quick response.
In your scenario:
1. You configured to different DNS servers and probably only one of them replied to DNS queries. And this is OK.
2. When non valid IP configured means that DNS server will not reply to DNS query and than failover will query the second DNS server in the list. And this is also OK.
I'm looking 2 different DNS servers configuration when one of them will reply to different domains. For example:
First server will reply to *.mycompany.com.
The second one will reply to any query except mycompany.com domain(since it is not published).
Thanks again,
Oleg.