DNS Zones Etc. Question - rehash

I'm having much the same issue as many others...
I've setup DNS for my local network and named records are resolving but addresses are not.
Router (Time Capsule)
WAN 69.x.x.x
Private 10.0.1.1
Server: duke.dshng.net (authority locally and forwards to google)
10.0.1.2
Server Second Interface: svn.dshng.net
10.0.1.3 (only exposed IP on router)
DNS is set to 10.0.1.2 on router and 127.0.0.1 on server.
Forwarding is set to 8.8.8.8 & 8.8.4.4 (Google)
Search Domain is set to dshng.net
If I setup as follows, I don't get the "Rebuild DNS" error but it only takes care of the local server. What I want follows this 'working' config:
+(this is only the duke entry - first things first)+
*Primary Zone*
*Primary Zone Name: duke.dshng.net.*
Nameservers
*Zone: duke.dshng.net*
*Nameserver Hostname: duke.dshng.net.*
Machine
*Machine Name: duke.dshng.net.*
*IP Addresses: 10.0.1.2*
*Reverse Zone*
*Reverse Zone Name: 1.0.10.in-addr.arpa.*
*Allows zone transfer: No*
Nameservers
*Zone: 1.0.10.in-addr.arpa.*
*Nameserver Hostname: duke.dshng.net.*
*Resolve 10.0.1.2 to duke.dshng.net.*
So what I want doesn't seem to work:
*Primary Zone*
*Primary Zone Name: dshng.net.*
Nameservers
*Zone: dshng.net*
*Nameserver Hostname: duke.dshng.net.*
Machine
*Machine Name: duke.dshng.net.*
*IP Addresses: 10.0.1.2*
*Machine Name: svn.dshng.net.*
*IP Addresses: 10.0.1.3*
*Reverse Zone*
*Reverse Zone Name: 1.0.10.in-addr.arpa.*
*Allows zone transfer: No*
Nameservers
*Zone: 1.0.10.in-addr.arpa.*
*Nameserver Hostname: duke.dshng.net.*
*Resolve 10.0.1.2 to duke.dshng.net.*
It seems pretty straightforward and I had this working, I thought, in Ubuntu, but it just doesn't seem to resolve. I'm using the GUI so maybe that's the issue??

Your primary zone is the DOMAIN name that ALL devices will append to their names to be looked up in DNS. so for you it is 'dshng.net'. YOu need to have a DNS server setup with a STATIC ip address and then when you create dshng.net you can add that DNS record. Then you add each device, such as 'duke' and 'svn'.
Peter

Similar Messages

Another DNS Zone Question! :)

I have several geographic sites all with their own leopard servers (ten or so). Each are open directory masters managing public ip subnets. We do have an external dns server and all of our servers have registered names that are part of the same domain....
My question is this... when setting up dns on each server, do I need to create zones, or can I just make the dns forward to our external name server. I am worried that having more that one ns authoritative for the same domain will cause problems with our isp dns server? I have one server running just fine without zones... just forwarders ... and all is running smoothly, ical, wiki's, mcx, mobile accounts, etc...
Looking forward to finding out whether having zones at other locations and authoritative dns servers is a bad thing or not.
Thanks.

As long as the external DNS server has all of the info you need, there's no need to set up duplicate zones on your servers; as you note, it could even cause problems if the info got out of sync. In fact, you don't even need to act as a forwarder, you could just turn off DNS service and configure all your computers (servers & clients) to use your ISP's DNS servers.
In your situation, I see two reasons you might want to run DNS service: in case your internet link goes down (losing access to DNS tends to make it hard to find servers, even if they're on the same LAN), or if the public DNS servers don't have the reverse DNS (IP number -> domain name) entries you need. If you're worried about the first, you could set your servers as secondaries (aka slaves) for the relevant zones, in which case they'll download the zone files from the master and automatically keep in sync. If the second is an issue, you're probably best off bugging your ISP -- since the reverse records are tied to your IP numbers, and those're "owned by" the ISP, they're generally in charge of the reverse DNS no matter who's hosting your forward DNS zones.

Question about DNS zones

Here's my problem..
I have an internal webserver that has an external address. Clients on my internal network (the same as the webserver) can't access the internal server using its external address. I got around this in a Windows enviornment (there are multiple buildings with different environments) by creating a primary DNS zone with the external address of the server, and an A Host pointing to the internal address.
I'm having some trouble getting this setup on Lion server, and rather than breaking DNS again, I figured I'd ask around first. Like I said, I tried adding a new zone, and did something that broke DNS. I had to manually edit the configuration file to remove the new zone. The FQDN is different from the name of the Mac server.
Basically the Mac server is school.com, and I need school.google.com to point internally. These obviously aren't the real addresses, but it illustrates what I need to accomplish.
Does this make sense? Is it possible with Lion Server?
Thanks

If you want to access the webserver internally as school.google.com you cannot and should not try to create a google.com zone. If your website has your own private domain e.g. www.myschool.edu then as you (presumably) own and control that domain then you can run what is typicially called a 'split-horizon' DNS setup.
You could have a second domain name just for the website which still needs to be owned by you, this would let you use say domain.local as the main internal Active Directory domain and a second dmoain like myschool.edu for the website.
With a spit-horizon setup you need two DNS servers, one would be used just internally, the other would be used just externally. So anyone outside your network i.e. on the Internet would use the external DNS server (often your ISP), and anyone on your LAN uses the internal one. The internal one would map www.myschool.com to your internal LAN IP address of your webserver, the external DNS server would map the same www.myschool.edu to your internet routers address. Your router would then have to setup a NAT port mapping rule to forward the HTTP traffic to your internal webservers IP address. You can still have multiple websites hosted internally and be accessible externally but all of them must run on a single internal webserver as the NAT port mapping can only map to a single IP address per protocol (port number).

External DNS zone on Internal DNS servers

We currently have a 2 domain forest with DNS running on all domain controllers. All domain controllers are 2012 or 2012 R2 and our Domain and forest functional level is set at 2008 R2 due to the existence of an exchange 2003 server which wont be retired
for several months. We have 2 DNS servers in the root domain and 4 DNS servers in the child domain. This is a centralized DNS setup. Our parent domain is DOMAIN.LOCAL and the child domain is XX.DOMAIN.LOCAL. Externally, our DNS is MYDOMAIN.com. we
do not have a public facing DNS server and our DNS records are hosted by a 3rd party
We want to add the MYDOMAIN.COM DNS zone internally (AD Integrated) since we have several instances where applications do not really work well with the XX.DOMAIN.LOCAL DNS. We want this zone to host several DNS records for internal resolution
only since we do not have any public facing applications or web servers such as SharePoint etc.
My question(s) is this?
How is the best way to do this and how will it affect the zones we currently have in place.
Is it as simple as creating a new forward lookup zone, adding static records?
How do we (or do we) handle delegation?
Any information or suggestions to get me started would be greatly appreciated.
Russ

Hi,
I’m not quite understand your question, do you want to create a new primary DNS zone on your current DNS server? If so, you
just need to create a new primary, you can create the additional primary DNS zone.
The related KB:
Configuring a new primary server
http://technet.microsoft.com/en-us/library/cc776365(v=ws.10).aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Can't create DNS zones in Server Admin

Hi All,
So, I've run into this strange problem where when configuring the zone files for the DNS server in Server Admin that clicking on the + button doesn't do anything. I've re-installed Tiger Server including reformating the disk and still nothing.
Can anyone tell me where the zone file is kept. It might be better just to make my own unless anyone can tell me why the + button isn't working.
Thanks much!

Definitely better to make your own, if you know how (lots of good google-able docs on this). Using Server Admin for DNS zone files is dicey at best.
BIND config file is located at '/etc/named.conf'
Zone files live in '/var/named/.' Primary zone files are named 'myDomain.com.zone' and secondary files are named 'myDomain.com.bak'
Feel free to email me if you need some default files.
Can anyone tell me where the zone file is kept. It
might be better just to make my own unless anyone can
tell me why the + button isn't working.
iBook G4 Mac OS X (10.4.3)

Active Directory Integrated DNS Zones, replicate only to specific domain controllers

I have a customer with a fairly large Active Directory forest with many domains that they are trying to consolidate into a single domain which likely take 18 to 24 months according to their timeline. During this time, they would like all DNS zones
to be serviced directly from the new domain controllers, meaning, domain A would have replicas of domain B, C, D, E, etc. Because the environment is complex and some domain controllers in domains other than A are in a very sad state and replication problems
abound, they would like to avoid replicating all zones forest wide.
I've never done this before, or even considered it necessary, is it even possible? I don't have a ton of time for trial and error, but based on this there seems to be some hope:
https://technet.microsoft.com/en-us/library/cc753801.aspx?f=255&MSPPError=-2147217396
Is this telling me how to do what I want to do?
Thanks
J
Joseph M. Durnal MCM: Exchange 2010 MCITP: Enterprise Messaging Administrator, Exchange 2010 MCITP: Enterprise Messaging Administrator, MCITP: Enterprise Administrator

He actually didn't specify much about dynamic updates requirements for old domains, if they don't need secure dynamic updates then a primary zone would work:
The DNS Server service allows dynamic update to be enabled or disabled on a per-zone basis at each server that is configured to load
either a standard primary or directory-integrated zone.
REF: Understanding Dynamic updates
This post is provided AS IS with no warranties or guarantees, and confers no rights.
~~~
Questo post non fornisce garanzie e non conferisce diritti

Different SBA DNS SRV entry for the same dns zone?

Hello,
I got here a testlab with one enterprise pool and one sba deployed. The Branch Site got also an DNS Server installed. Both are using the same dns zone "test.com".
Of course now i got different server for the same SRV Record _sipinternaltls._tcp.test.com - one for autodiscovery in the enterprise pool and one for the sba. Also I want to add the second one as failover srv + the DNS Server in the Enterprise Pool should
be used as a Forwarder.
Now I got some issues how to deploy several entries on two different dns server for the same zone.
1.) If I add manually the same zone + DNS SRV entries on the SBA the dns is somehow not resolving/forwarding the entries on the other dns server in ee to other servers which are not on my SBA dns.
2.) If I only pinpoint the SRV entries for _sipinternaltls._tcp.test.com (one for sba and failover for ee site) the dns won't resolve the second a record to the enterprise pool.
What is the Best Practise for DNS SBA? Always point to the enterprise pool and, therefore, no other configuration is needed?
Regards DrWho

I played a little bit around. Problem was that I can not add the pinpoint dns srv entries via gui. Aditionally the tutorials did not work as my DNS server for SBA is not on a domain controller. In the end I did this:
sbafe -> fqdn of my sba
eefe -> fqdn of my frontend of enterprise pool
dnscmd . /zoneadd _sipinternaltls._tcp.test.com. /primary /file _sipinternaltls._tcp.test.com.dns
dnscmd . /recordadd _sipinternaltls._tcp.test.com. @ SRV 0 0 5061 sbafe.test.com.
dnscmd . /recordadd _sipinternaltls._tcp.test.com. @ SRV 10 0 5061 eefe.test.com.
dnscmd . /zoneadd sbafe.test.com. /primary /file sbafe.test.com.dns
dnscmd . /recordadd sip.sbafe.test.com. @ A 192.168.10.220
dnscmd . /zoneadd eefe.test.com. /primary /file eefe.test.com.dns
dnscmd . /recordadd sip.eefe.test.com. @ A 192.168.0.40
Question is if that is a good best proctise or should the dns server within a zone contain the same records (Primary/Backup). The Client will then always hit the FE of the EE Pool first.
Also its quite a lot of work to setup.

DNS Zone for Mail

Following on from my first question which the nice Mr Camelot answered for me
I have a server which has a DNS zone of companyname.net.
Internal mail has been setup using Mail Exchanger set to mail.companyname.net.
I have checked changeip -checkhostname and there are no issues.
The public DNS records have been set to make mail.companyname.com the MX record, and an A record for mail.companyname.com has been setup pointing to the static IP.
As I see it I have two options I can move forward with (3 actually if I wipe the server and start again )
1. Try and rename the DNS zone to companyname.com and then reset the mail settings to match.
2. Setup a CNAME on the server internal DNS to point mail.companyname.com to mail.companyname.net and leave the mail settings as they are.
I am in the process of installing SL Server on a VM to test the first option to see if it is viable, but my question is are there any options I have missed, and what would you suggest I do in this circumstance?
TIA.

So you have a zone for a host mail.example.net within your network, and valid external DNS services with an A record and MX at mail.example.com within your external DNS services, and you're wondering about rebuilding this all?
It'd be far easier to just enable mail.companyname.com as a virtual host within the mail server configuration.
Personally, I'd look to remove the use of the internal example.net MX for the mail server, and use the external path. You can set up the MX for the internal network to resolve to mail.example.com, for instance. With that (and with a firewall that knows how to reflect" outbound traffic for the WAN IP address, or - somewhat uglier - adding a DNS A record for the mail.example.com within your internal zone), the configuration is the same for all hosts, whether internal desktops or mobile devices.
Note that the companyname.com and companyname.net domains are real and registered domains. The domains example.com, example.net and example.org are RFC-reserved for documentation and for these sorts of postings.

No DNS zones in server admin

Here's my log:
Oct 21 12:49:25 server servermgrd[2019]: -[DNSManagerRRMgr bindZoneDB]: Unable to load zone database (RRs) for "***.com" from file "/var/named/db.***.com": CNAME and other data

Definitely better to make your own, if you know how (lots of good google-able docs on this). Using Server Admin for DNS zone files is dicey at best.
BIND config file is located at '/etc/named.conf'
Zone files live in '/var/named/.' Primary zone files are named 'myDomain.com.zone' and secondary files are named 'myDomain.com.bak'
Feel free to email me if you need some default files.
Can anyone tell me where the zone file is kept. It
might be better just to make my own unless anyone can
tell me why the + button isn't working.
iBook G4 Mac OS X (10.4.3)

10.4.4 update and now my DNS zones aren't visible!

After the 10.4.4 update, I can't see my DNS zones, and the log says there are now errors . for example: servermgr_dns: Bad zone file for zone macs4ever.com MX/CNAME line: "@" before A line. Ignoring.
This wasn't an issue before. Has something changed in the zone formatting?
What file can I edit to correct the syntax if needed.
I appreaciate your time and assistance,
matt caswell

Note that I write my own zone files and prefix them with "db." just so that I do not overwrite the default ones. The name of the zone file is in itself not critical, as long as the correct file is referenced in named.conf.
My zone definitions in /etc/named.conf...
// a caching only nameserver config
zone "." IN {
type hint;
file "named.ca";
zone "localhost" IN {
type master;
file "db.localhost";
allow-update { none; };
zone "0.0.127.in-addr.arpa" IN {
type master;
file "db.127.0.0";
allow-update { none; };
zone "foo.com" in {
file "db.foo.com";
type master;
zone "0.0.10.in-addr.arpa" IN {
file "db.10.0.0";
type master;
============================
The Zone Files in /var/named...
============================
Zone File "db.localhost"
$TTL 86400
localhost. IN SOA server.foo.com. postmaster.foo.com. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS server.foo.com.
IN A 127.0.0.1
====================
Zone file "127.0.0" (reverse zone for localhost)
$TTL 86400
0.0.127.in-addr.arpa. IN SOA server.foo.com. postmaster.foo.com. (
2006011511 ; Serial
3h ; Refresh
1h ; Retry
1w ; Expire
1h ) ; Minimum
0.0.127.in-addr.arpa. IN NS server.foo.com.
1.0.0.127.in-addr.arpa. IN PTR localhost.foo.com.
==========================
Zone file "db.foo.com"
$TTL 86400
foo.com. IN SOA server.foo.com. postmaster.foo.com. (
2005101301 ; serial
3h ; refresh
1h ; retry
1w ; expiry
1h ) ; minimum
; NAME SERVERS
foo.com. IN NS server.foo.com.
; ADDRESSES FOR CANONICAL NAMES
localhost IN A 127.0.0.1
server IN A 10.0.0.1
; ALIASES
ical.foo.com. IN CNAME server
mail.foo.com. IN CNAME server
ftp.foo.com. IN CNAME server
; MAIL RECORDS
foo.com. IN MX 0 server
======================
Zone File db.10.0.0 (reverse zone for foo.com)
$TTL 86400
0.0.10.in-addr.arpa. IN SOA server.foo.com. postmaster.foo.com. (
2006011500 ; serial
3h ; refresh
1h ; retry
1w ; expiry
1h ) ; minimum
0.0.10.in-addr.arpa. IN NS server.foo.com.
; REVERSE LOOKUPS
1 IN PTR server.foo.com.
========================
Note that you may have different records but hopefully you get the drift of it.
"Bad zone file for zone domain.com MX/CNAME..."
The particular cause, for me, of the above error was that, in db.foo.com, I used to have the following for the MX record...
foo.com. IN MX 0 mail
This created the error message as there was not a direct A record for 'mail'. The amended zone file now works... but...
I still have an issue with this... In my case my DNS is purely for the private LAN but if it was a public DNS then I would have needed to set up the server with a hostname "mail.foo.com" instead of "server..." and then alias 'server' to 'mail'. Something you really should know before setting up the server
(Actually, I don't even know why I have the MX record in the internal DNS as the mail server can function quite happily without it.)
Anyway, I find this on-line reference really handy although you can get a bit 'lost' in all the links within it...
http://www.zytrax.com/books/dns/
Have fun.
-david

Restrict DNS zone transfers to specific hosts?

Is it possible within Server Admin to restrict DNS zone transfers to specific hosts? If not, can the allow-transfer statement be added to /etc/named.conf without breaking the ability to use Server Admin to administer DNS?
Thanks,
Bob
XServe Dual Processor Xeon server Mac OS X (10.4.8)

you can add the statement... it should not break Server Admin.
While you are there, you may want to add forwarders for efficiency.
Add the bold code
options {
directory "/var/named";
forwarders {
0.0.0.0;
0.0.0.0;
forward first;
recursion true;
replace 0.0.0.0 with your ISPs name servers
Jeff

DNS Zones Losing Info

Out of 8 DNS zones, I have two that are misbehaving.
I enter zone info and create hosts. All appears fine. But when I click on Save, when the screen redraws, all of the host info is gone. Also, clients cannot resolve, so I know it is actually being lost and not hidden.
Can't understand what is causing this. Records are fine, believe me.
Also tried deleting these two zones to recreate. After clicking Save, they reappear... again, with no host records!
I also tried renaming the zones to deleteme.com, etc. Save. They came back under their original names!

I am experiencing exactly the same issues. I finally got rid of the zones that SA couldn't delete by editing the files so I was working again from a blank sheet of paper (as it were). BTW, I needed to delete the zones because of the bug that causes a zone to get stuck as 'example.com' due to it being saved prior to renaming it to what it should be. Anyway...
Simply using SA I created a new zone, renamed it and added a record or 2 and saved. All appeared correct and I added maybe another 20 records (some A, some CNAME) with regular saves and all appeared to be ok (except it creates a separate reverse zone for every C Class address, but that's another issue). During this time SA had a tendency to hang for a short while, then be unresponsive so I would have to quit it and start again. But finally everything seemed to be OK and I left it till the next day...
when I found it would not display any records in the primary zone. Sometimes if I 'opened' (clicked the triangle) a reverse zone I would see the PTR record(s), but then the screen would flicker and the record(s) would disappear. The forward/primary zone simply won't show anything - even its SOA info appears missing.
I have looked at the files and can see no obvious problem and in any case they were all created by SA so they ought to be correct. Working one day, not the next, with no changes in between. This reminds me of someone else's products.
The zone info is there, but SA won't show it so I cannot edit it further as it needs before being usable. Basically now I'm stuffed.

MX/CName Entries in DNS Zone

Hey All,
How do you add MX entries and CNAME entries to a XServe 10.3.9 DNS zone? I tried using the Admin Server console and selected DNS zone but all of the buttons were disabled and it wouldn't let me start the service.
Is there a file I can just edit to get the job does or does it have to be set through the console?

I also fought with Server Admin and DNS on 10.4.8 and finally gave up; there are too many bugs in Server Admin simply preventing managing DNS entries (especially when you want to set up more than for a handful of domains).
Personally I found it more easier to do this from the command line. Here is a short outline:
Log in by SSH as root user, go to /etc directory and edit named.conf file (e.g. "pico named.conf").
For each domain, add an entry like this:
zone "domain.tld" IN {
file "domain.tld.zone";
type master;
Save the file, restart DNS ("serveradmin stop dns", "serveradmin start dns"). Ensure that DNS runs ("serveradmin status dns"); if it not runs, you made a spelling error somewhere in your entries and need to check named.conf.
Then go to /var/named directory and create a "zone" file for each domain. Use the same filename as you specified before; in this example "domain.tld.zone".
Such a file contains typically this:
$TTL 86400
domain.tld. IN SOA dns1.mydnsserver.tld. info.domain.tld. (2006110101 3h 1h 1w 1h)
domain.tld. IN NS dns1.mydnsserver.tld.
domain.tld. IN NS dns2.mydnsserver.tld.
domain.tld. IN MX 10 domain.tld.
domain.tld. IN TXT "v=spf1 a mx ~all"
domain.tld. IN A 194.77.100.91
www IN CNAME domain.tld.
Then again, restart DNS service.
My example shows a basic domain's DNS record, but you may wish to use different/more entries. Either look on the Web for some explanations about DNS or just ask again
However please note that from now on you cannot use Server Admin any longer to modify DNS settings - this leads, without warning, to lose any domain records created manually !!! The only task you can do is to check the DNS log file from there.
By the way, in order to verify made DNS entries for domains, I found http://www.dnsreport.com being of high value for me.

OS X 10.6.1: bootpd, named, and dynamic DNS zone updates

I have OS X 10.6.1 installed on a Mac Pro. It is configured to be the name server and DHCP server for my home network, i.e. /etc/named.conf and /etc/bootpd.plist have been modified to provide these services.
I've encountered no problems with either the name server or the DHCP component of bootpd after upgrading to OS X 10.6(.1); however, one thing that continues to bug me is how to configure bootpd to dynamically update the DNS zone files whenever a lease is issued, released, or expires.
At work, I use the Internet System Consortium's DHCP software and have it configured to dynamically update DNS whenever leases change state. I would really like to have DNS done the same way at home.
What changes need to be made to /etc/bootpd.plist that would allow dynamic DNS updates to occur?

Did you ever get an answer to this? Would rather not change the DHCP server in Snow Leopard....
Thanks

DNS zones for Mail virtual host

Hello,
We have a split DNS server hosting mail for company.com. So we have a DNS zone called company.com with the appropriate records (A, MX).
We now need in the same box to host mail for another domain, company.org. Do we have to create a separate DNS zone for company.org with another A record for the server?
Regards
Kostas

If you're going strictly for mail and with no other network services are associated, then Camelot is quite correct and you can use an MX, and enable virtual hosting within the mail server.
If you're doing "other stuff" with that domain, then you'll need the zone.
Given the usual fondness for, well, "incomplete" questions and for server configurations and networks that, um, "evolve", then the answer I'd use is "yes"; add the zone. (If for no other reason than somebody's eventually going to want a web server with the domain, or...)
I'm not a big fan of split-horizon though I can and do use it for specific cases. I prefer to partition "inside" from "outside", and that avoids this quagmire.
And FWIW, "example.com", "example.org" and "example.net" are RFC-reserved domain names available for posting obfuscated examples and questions, for documentation, and related use. "company.com" and "company.org" are real and registered domains.

DNS Zones Etc. Question - rehash

Similar Messages

Maybe you are looking for