topics that matter; ideas worth sharing

share a tip, submit a link, add something new

Dr. Internet

June 27, 2001, 12:10 PM —  Network World — 

A recent story talked about split DNS -- how can this be done? For example, our internal DNS Start of Authority has a suffix domain of mro.com, so how can a forwarder resolve against another site with the already registered name (of mro.com)?

If you break the rules, you can do all kinds of things with DNS service configuration. You can list forwarders by IP and leave their names out. You can list the internal server at the root server level in the eyes of the internal clients and secondary servers and still go get the records for your public (invisible to the internal world) services servers from an external DNS server by forwarding. You can really have fun with the name space if you configure the DNS server to use a host file instead of DNS. Forwarding is just one way to get answers you don't locally have on hand. If your internal DNS server thinks it's the ultimate authority for the entire domain and won't forward requests for names in the domain it doesn't have, then you can make it secondary for the master domain and primary for the internal subdomain(s) so it will look elsewhere for names in the master domain it doesn't know. The O'Reilly BIND book, the BIND manual at www.isc.org, and the book Firewalls and Internet Security by Bill Cheswick and Steve Bellovin, are excellent resources for more information on managing DNS across network boundaries.

» posted by abennett

Network World

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources