Redirect all DNS requests for a certain domain to a specific DNS Server

Hello,
I have setup a home lab to do some Microsoft training on. My lab domain name is "demo.lab". What I want to do is configure my cisco router to forward any dns requests to demo.lab to my Active Directory Server.
For example
If I ping mail.demo.lab, I want that reqest to be forwarded to my lab domain controller (dc01.demo.lab).
I have configured a SOA record on the Cisco router like so, but it still does not foward the reqest on (10.10.10.10 is the IP address of dc01.demo.lab).
ip dns primary demo.lab soa 10.10.10.10 postmaster.demo.lab
Any clues as to what i'm missing?
Thanks
Peter

Hi Karsten,
Yep my computer had the router as its primary DNS Server. The config you supplied worked! Thanks very much :)
Hi Cisco Freak,
Yep my AD server was also a DNS server. Yes that was one option, but I just didn't want to keep changing my DNS as my laptop goes to/from work with me. The config that Karsten supplied worked though.
Hi Terry,
Thanks for the link. I believe I had configured it correctly as per that docuemnt, but it didn't work for some reason. Still go reference material though.
The other option would have been to configure the router to use my AD server as its primary name server host like so;
ip name-server 10.10.10.10
ip name-server 8.8.8.8
The only problem would be that if/when my DC is offline, there would be a small delay when doing DNS requests, and since my internet is shared with my house mate, I didn't want to disrupt her too much.
Thanks again for your help!
Cheers
Peter

Similar Messages

  • My domain add WWW will redirect to DNS server's Domain, IE works ok,What's the reason

    I have a website, and I had added both @ and WWW A record on host. I set the domain as the home page, They all work ok in IE, WWW failed work in Firefox. What are the reasons?
    //My domian is http://www.hey-deals.com, hey-deals.com works fine, but http://www.hey-deals.com cannot work in Firefox! It redirect to DNS server's domain, how to set?
    Thanks!

    I have Windows capability but have never used it.  I can't imagine anyone using anything other than Pages for Word Processing, etc.  I use Safari and Firefox for Browsing.  I use Safari primarily and Firefox occassionally.  I have not used Internet Explorer for years and years.  In fact, I was sort of surprised when I learned that some people do still use Internet Explorer. 
    I wasn't sure whether or not there was an Ultra-Safe way to go about checking to discover whether or not Apple Users had to worry about a problem with this particular bug.  
    Although there IS a link provided in the Denver Post's on-line version of this particular news article, I hated to click on a strange link - even if it was provided by the local newspaper.  It is just as easy for the local newspaper to be fooled by bogus links as it is for anyone else to be fooled. 
    My understanding from friends is that there are a whole lot of local newspapers - all across the country - who are currently running this news article - or an article very similar to it. 
    So it would seem to me that a whole lot of Apple users all across the country might suddenly be wondering whether or not they have anything to worry about - and whether or not there was an Ultra-Safe way for Apple users to check all of this out. 
    I contacted my service provider about this issue but, so far, have not heard anything back from them.
    Thanks for the response.
    Sincerely,
    Hannah

  • How to get all authorization objects for a certain authorization profile

    Hi ABAP experts,
    I have the following problem: for a certain authorization profile of a role (created with transaction PFCG) I would like to get all contained authorization objects: e.g. for the contained object PLOG I would like to know/read all corresponding parameter values.
    So:
    - where are these values stored (dictionary table)?
    - is there already a FM or a report to read all authoriation values for a certain authorization profile?
    Thanks in advance.
    Best regards,
    Oliver

    Hi,
    check the following it might useful for you:
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c
    if helpful reward points are appreciated

  • How to redirect all Tomcat request to a servlet

    How can I set up Tomcat to redirect all request to a certain sevlets which sends the user to the right web-application.
    What ever the user type in the URL, i.e.:
    http://customer01.myDomain.dk
    or
    http://customer02.myDomain.dk
    or
    http://customer01.myDomain.dk/myApp/login.jsp
    - I want tomcat to redirect to a servlet class. Is that possible?
    Thanks

    Yes but pretend each customer has more than one web-application. Then it is not possible for the customer to use only this URL:
    http://customer01.myDomain.dk
    Each customer need a seperate url for each application, something like this:
    http://customer01.myDomain.dk/myApp01/login.jsp
    http://customer01.myDomain.dk/myApp02/login.jsp
    ( easy URL�s they can remember )
    And I don�t think it is possible to make an alias to the exact URL to the web application. That�s why I need Tomcat to redirect all request to i.e. Index.jsp which then redirect to the correct application.
    Here is an example:
    Customer01 type in:
    http://customer01.myDomain.dk/myApp01/login.jsp
    Tomcat calls Index.jsp which redirect to this URL:
    http://www.myDomain.dk/myApp01_ID0921/login.jsp
    Can you help me with this problem?

  • How can I see a list of all my comments for a certain PDF document on my iPad?

    how can I c a list of all of the comments in a PDF document in the acrobat app on my iPad?
    thanks,
    ori

    Hi Orirotlevy,
    Sorry but no such feature is available in Adobe Acrobat app for ipad.
    Moreover, You can provide your valuable suggestions for this app, using the following Link : https://www.adobe.com/cfusion/mmform/index.cfm?name=wishform
    Regards,
    Rahul

  • Can to setup Xserve to process all Mac requests for our AD enviornment...

    I want to setup one of our XServe to be the directory controller for all of our Mac clients, which the XServe would then pass on to our AD server. Would also like that server to allow searching of Directory Users for iChat, etc. How can I set a system up to basically look like an OD server, but authenticate to our AD server, and also provide directory services to applications like an iChat server?
    This system would NOT be pointed to by any PC's. We currently employ about 1300 users, and have about 200 Macs in the building. They want a seemless portal for the Macs in AD. Suggestions, tips, etc? Currently running 10.5.4 on all of our XServes.

    check these docs:
    http://www.afp548.com/filemgmt_data/files/AD-OD-2.1.pdf
    http://www.afp548.com/article.php?story=20080304215842264

  • Redirecting all HTTP traffic to HTTPS that will reverse proxy specific URI

    -- Requirement --
    I have a Sun web server 6.1 SP4 that sits in a DMZ that must securely reverse proxy traffic to an internal application server listening on 443.
    The web server instance has two listen sockets, 80 and 443.
    The web server instance must accept traffic on port 80 but re-direct it to 443 so all subsequent traffic with the client happens over HTTPS.
    HTTPS traffic for "www.mydomain.com/myapp/" must be reverse proxied to the internal app server, "https://myapp.mydomain.com/myapp/".
    -- Current set-up --
    The server reverse proxies both HTTP and HTTPS traffic with the indicated URI.
    How can I constrain the reverse proxying to HTTPS traffic?
    Thanks for your help,
    Jez

    Thanks Chris that worked perfectly.
    Aside
    Before your solution I had (unsuccessfully) tried the following obj.conf directive
    <Client security="false">
    NameTrans fn="redirect" from="/" url-prefix="https://www.mydomain.com/"
    </Client>However, it didn't work - is it not possible to use the <Client security="false"> in this manner?

  • Create separate NDR for each exchange domains hosted in one exchange server single forest

    Hi techies,
    Our environment is windows 2012 domain with exchange 2013.
    Configured with multiple domains like xyz.com, abc.com etc.,
    Problem description:
    When a user mailbox [email protected] is full, the exchange server delivers the NDR from [email protected]
    Requirement:
    Is it possible to create separate NDR for each domain?
    Management do not want to show the domin name xyz.com for the users belong to abc.com when delivers an NDR messages.
    Appreciate your earliest response.
    Thanks
    Alagar

    Hi Alagar,
    Please check what is your -ExternalPostmasterAddress says:
    Get-TransportConfig | fl *Post*
    You can set it to blank if required.
    Set-TransportConfig -ExternalPostmasterAddress $null
    And if senders are still receiving NDR's after you set *Prohibit send and receive at (GB): unlimited , please give it some time, it might be due to AD replication is yet to complete.
    Regards,
    Satyajit
    Please“Vote As Helpful”
    if you find my contribution useful or “MarkAs Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

  • How to configure sent email to a certain domain to use a specific account?

    Hello!
    I have OS X Mail setup with 3 different accounts. Is it possible to setup OS X Mail so that all mail destined for a certain domain automatically selects a particular account to use?
    For example, I have [email protected] and [email protected] configured as accounts. I'd love to make sure that anytime I send email to [email protected], OS X Mail would automatically select the [email protected] account.
    Thanks!
    Ricardo

    Hi,
    It seems like mail enabled lists are not available with SharePoint Online yet, due to performance issues. At least that what they said in Q4 2012. I have not been able to find anything that changes that answer.
    http://community.office365.com/en-us/forums/154/t/809.aspx
    Have you checked if Site Mailboxes could give you the features you require? That's available in SharePoint Online.
    http://blogs.technet.com/b/lystavlen/archive/2012/08/18/new-feature-site-mailboxes-in-sharepoint-online.aspx
    /Anders Eide

  • Lighttpd https redirect for only certain directories

    This works great for redirecting all traffic to https on my home server:
    # Redirect all http requests to https
    $SERVER["socket"] == ":80" {
    $HTTP["host"] =~ "(.*)" {
    url.redirect = ( "^/(.*)" => "https://%1/$1" )
    However, I'm trying to exclude one directory from this (other people using it, self-signed ssl messages...you get the idea ) and I can't quite wrap my brain around it. Server Fault and Stackoverflow had some examples that were close, but I couldn't manipulate them into doing what I wanted. A gentle shove in the right direction would be much appreciated.
    Very simple layout: /srv/http/<dir1> /srv/http/<dir2> /srv/http<dir3> etc. Call it 'foo-dir' that I want to exclude. The server sits behind a consumer router with all port 80 and 443 traffic directed to the server's static IP.  External IP via dyndns.
    Thanks!
    Scott

    SFTP is a subset of SSH. Currently Apple uses OpenSSH which does not have any kind of chroot jail for SFTP as it does for FTP. If you want to have an SFTP chroot jail, you will need to do some alterations. Currently there are two methods which are documented here:
    http://www.schwie.com/brad/macosxsftpchroot/
      Mac OS X (10.4.4)  

  • Automatically redirecting all root home page requests

    How is it possible to automatically re-direct all pages requests for the sites root at http://www.mydomain.com/ to http://www.mydomain.com/myapp/ such that any subsequesnt requests for http://www.mydomain.com/myapp/otherpages.hmtl etc. are not affected?
    Currently all requests to http://www.myhome.com/myapp/ all captured and passed through the reverse proxy plugin to a backend application server:
    NameTrans fn="assign-name" from="/myapp(|/*)" name="passthrough"
    <Object name="passthrough" 2=">">
    ObjectType fn="force-type" type="magnus-internal/passthrough"
    Service type="magnus-internal/passthrough" fn="service-passthrough" servers="http://192.168.1.1:80"
    </Object>Any requests to the root directory are handled by a client-side HTML redirect to http://www.mydomain.com/myapp/ which is then picked up by the web servers reverse-proxy passthrough.
    I would like to remove the client-side re-direct and have all root requests automatically rewitten as the subdirectory and then passed through the reverse proxy.

    Okay, I have dug back through the forums and elving gave the solution back in April '05:
    http://forum.sun.com/jive/thread.jspa?threadID=52552&tstart=850I have added the following lines to the default object in obj.conf - this redirects requests for the root folder to a subfolder, myapp, and these are then reverse proxied to another server:
    <Object name="default">
    <Client uri="/">
    NameTrans fn="redirect" from="/" url-prefix="/myapp"
    </Client>
    NameTrans fn="assign-name" from="/myapp(|/*)" name="passthrough"
    </Object>
    <Object name="passthrough" 2=">">
    ObjectType fn="force-type" type="magnus-internal/passthrough"
    Service type="magnus-internal/passthrough" fn="service-passthrough" servers="https://192.168.1.1:80"
    </Object>This now re-directs without any cient scripting.... which is tidier.

  • How does a user respond to an email request for group scheduling?

    How does a user respond to an email request for group scheduling?
    <P>
    The iPlanet Calendar Server(iCS) 2.x is a personal calendar system. As such,
    messages that are sent out are "publish" type messages, where no responses are
    expected. A future release of iCS will support group scheduling and will allow
    users to respond to email requests by returning the emails. These email
    requests will conform to the iTIP / iMIP standard, which means that they will
    also work for Microsoft Exchange users and for Outlook users using Microsoft
    Exchange.

    An update to what is required and what software did you "purchase" and install?  Aren't you on this forum?  There's no charge to use this forum.........
    Never mind.  I just got your question.  You received an email saying CSound responded to your post.  You don't respond via the email.  You come back to the forum and respond.

  • How to bypass from OAM authentication for certain domain

    Hi All,
    We are trying to unprotect certain domain from OAM domain but coudn't. Please help us fix this issue.
    Environement details:
    We have two nodes, one node for OAM_OSSO and another one for OSSO_Portal application.
    OAM server details:
    In this server, oracle application server single sign on(services are HTTP, OC4J, and OID) and OAM. Integrated OAM_OSSO using [ID 979827.1]
    Portal server details:
    In this server, oracle application server single sign on(services are HTTP, OC4J, and OID) and portal weblogic server(portal application) is running. portal weblogic is registered with thier own portal OSSO.
    In OAM, We protected following portal url's
    /sso/auth      
    /pls/orasso/orasso.wwsso_app_admin.ls_login
    portal _OAM integration is working fine.
    Now portal team come with new requirement for customer, application also running in their same portal weblogic server and that portal application domain is alreday registered with Portal OSSO and Portal OSSO page is protected by OAM. the requirement is bypass OAM authentication, and need to authentication against their own portal OSSO+OID.
    Please tell me how to bypass OAM authentication from this scenerio.
    -Sarath

    Hi MD,
    Thanks for your update.
    We are using oracle 10g. Please tell me how Anonymous scheme will help us to get out from this issue.
    Portal Weblogic server registered with portal IDM server and portal IDM server OSSO protected by IDM OAM. So if i tried any of the application which deployed under portal weblogic server will get protected by OAM right. Please correct me if iam wrong.
    In this scenerio we have two OSSO, one in OAM node and another one in portal server. Now portal team come up with new webserver domain for customer, in customer scenerio we want authenticate againt portal OSSO with their own OID rather than using OAM authentication. Here my concern is, customer or employee the portal weblogic server and portal OSSO are common for both user but only difference in webserver domain.
    So if i tried to access customer application, then customer webserver redirect to portal weblogic for open the requested page(note if webgate not in picture). portal weblogic server is register with portal OSSO and its redirect to portal OSSO for authentication but Portal OSSO server integrated with OAM using webgate.
    1. When tried to access customer application ,Portal OSSO server tried to show own sso login page for authentication but Portal OSSO server already integrated with OAM. so portal OSSO server requested to OAM to access portal sso login page not the request of customer page login.
    2. here,portal OSSO login page protected and OAM serve login page for OAM authentication against OAM OID. If i specify anonymous scheme for customer domain then how will work here, portal OSSO requested to OAM to access portal OSSO login page not the customer page or employee page...
    Here OAM authentication will come into picture for all scenario but need bypass for customer login.
    Requirement is when customer trying to access then authentication need to happen in portal OSSO not in OAM. Hope you understand the architecture.Please suggest how.
    -Sarath
    Edited by: 898990 on May 11, 2012 8:22 PM
    Edited by: 898990 on May 11, 2012 8:25 PM

  • Dns server for specific domain

    Is there a way to define a dns server for a specific domain?
    I'm setting up a develop machine with an amp stack and i want to redirect all urls with a specific domain (i.e. project.dev) to 127.0.0.1.
    I've done this on OSX with dnsmasq configured in this way:
    # dnsmasq.conf
    address=/.dev/127.0.0.1
    listen-address=127.0.0.1
    port=35353
    and adding a dev file in /etc/resolver with this content
    # /etc/resolver/dev
    nameserver 127.0.0.1
    port 35353
    but this in arclinux with dhcpd doesn't work.
    I've tested dnsmasq with
    dig [email protected] -p 35353
    and it works (the address returned is 127.0.0.1) so the problem is the resolver.
    I've also tried either put into /etc/resov.conf.head this:
    # /etc/resolv.conf.head
    nameserver 127.0.0.1
    port 35353
    and configure dnsmasq with the default 53 port without luck.
    This is my /etc/resolv.conf
    # /etc/resolv.conf
    nameserver 127.0.0.1
    nameserver 192.168.0.1

    On linux you should simply run all dns request through one nameserver that forwards everything it doesn't understand. [Edit: You can do that with dnsmasq.] Another simple way to create a local developer zone would be to use wildcard_dns_proxy instead.
    Last edited by progandy (2015-03-03 17:20:29)

  • How to configure DNS server to redirect all web traffic to one external website?

    I'd like to use the DNS service on my OS X Server as a way to force all all web traffic to one specific, external website. Not quite sure how to go about configuring it, though - any recommendations?
    (BTW, this is, obviously, not our primary DNS server; I intend to silently update the preferred DNS server for users who fail to complete their timesheets in order to force the issue)

    Web clients don't generate uniquely-identifiable DNS queries; there's no SRV request or related traffic that you could select on and spoof.  So if you do implement this, everything querying the spoofing DNS server will get the spoofed host, or you'll have to spot specific queries that are likely web queries; Facebook, Google, Bing, etc. 
    If you still want to implement this, then I'd probably replace the DNS server with a runt DNS server (maybe hack dnsmasq or maraDNS, or create yourself a trivial DNS server) and have that always return the specified IP address.  This avoids having to hack BIND to be universally authoritative, which is probably on par with hacking a simpler DNS server to always return a fixed IP address, and the latter is probably easier to undo.
    A firewall can spot TCP port 80 and port 443 traffic, unlike a DNS server.   Firewalling outbound port 80 traffic is more typical of these requests, and either trap that traffic to a specific web page based on the capabilities of the firewall, or the web proxy approach that Camelot suggests.  There are folks that tie access into the web proxies into external authentication and related; that'd be able to do what you want.   Web proxies are usually combined with firewall blocks, as most sites want only the web proxy to have external access, too.  But this is also rather more pieces than a DNS redirect, too.

Maybe you are looking for