DNS Help

Re: DNS Help

From:

Date:

Time:

If your internal server thinks of itself as authoritative for the
zone turners.com, then it will never ask any other server for names
within that zone.

However, if you want to just "override" the IP address of
corp.turners.com, then you can do that. On your internal server,
create a zone named "corp.turners.com", with the following records:

corp.turners.com. NS ns.corp.turners.com.
ns.corp.turners.com. A <internal DNS server IP>
corp.turners.com. A 192.168.168.15

Another zone you might want to create, if you haven't already, is a
reverse zone named 168.168.192.in-addr.arpa. It would have, at the
least, the following records:

168.168.192.in-addr.arpa. NS ns.corp.turners.com.
15.168.168.192.in-addr.arpa. PTR corp.turners.com.

This zone is not strictly necessary, because you're using EIMS and
have set the "default domain" setting. By default, your server would
report its name as being whatever is in its PTR record. From its
point of view, it's on the 192.168.x.x address, so it would look for
a PTR record for that name.

Furthermore, you'll want to change one setting in EIMS, since it's
currently incorrect: Change the "default domain", or whatever they're
currently calling it, from "turners.com" to "corp.turners.com". The
reason for this is, some mail servers will refuse connections from
your server unless you have the following items all matching:

- The name used in the MX record (currently corp.turners.com)
- The name used in the public PTR record (currently
h-64-105-28-144.lsanca54.covad.net, which is going to cause you
problems)
- The name used in the SMTP greeting (currently turners.com)

Talk to your ISP about whether they'll change the public PTR record
to suit your needs.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com We Make DNS Easy!

At 6:49 PM -0700 6/1/01, Jeff Grossman wrote:
>I have a question. My domain is hosted offsite with the DNS servers. I
>have the domains e-mail coming into the Main Office using a DSL line behind
>a firewall using NAT. I would like to setup QuickDNS inside the firewall
>for the internal ip numbers of two machines. One of those machines is the
>mail server. But, I don't want to enter in the ip number for the website.
>Is this possible? I would like QuickDNS to transfer the information it is
>missing for my domain from the main DNS servers which have the main domain
>information in it.
>
>I hope this makes sense.
>
>Okay, maybe I can illustrate this better.
>
>Offsite DNS server:
>turners.com. SOA this dns server IP number
>turners.com. A website IP number
>turners.com. MX corp.turners.com
>corp.turners.com. A My DSL line IP number
>www.turners.com CNAME turners.com.
>
>Inside DNS server: (corp.turners.com)
>turners.com. SOA offsite name server IP number
>turners.com. NS offsite name server IP number
>turners.com. MX corp.turners.com.
>corp.turners.com. A 192.168.168.15
>
>
>But, if I enter in www behind my firewall, it tells me the site does not
>exist. QuickDNS will not try and lookup the information from the main DNS
>server?
>
>Thanks for the help.
>
>Jeff
>
>---
>Jeff Grossman (jeff@turners.com)
>Director - Information Systems, Turner's Outdoorsman
>http://www.turners.com

Sales:
888/4-DPOINT

Support:
858/452-3696