1

I have a Windows 2012R2 Windows AD domain "example.local" that I need to to setup a stub (preferable) or a conditional forwarder but my named fails to locate or resolve a remote ".local" domain. The masters are reachable and I can nslookup/dig to them directly. Other stubs that are not a .local resolve correctly but I am guessing the mDNS warning from dig is my issue and I haven't found a way around this.

zone "example.local" {
    type stub;
    masters { 192.168.0.5; 192.168.0.6; };

$ nslookup server1.example.local

Server:     127.0.0.1
Address:    127.0.0.1#53
** server can't find server1.example.local: SERVFAIL

$ dig server1.example.local
; <<>> DiG 9.11.13-RedHat-9.11.13-6.el8_2.1 <<>> server1.example.local
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 14164
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 98c1d3e8a0e6bad5286641e85faaa9c39bb8927923b46b3a (good)
;; QUESTION SECTION:
;server1.example.local.     IN  A

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Nov 10 09:54:59 EST 2020
;; MSG SIZE  rcvd: 77
Dean Benson
  • 11
  • 1
  • The root is probably that you chose the "wrong" name for your AD domain https://serverfault.com/q/76715/546643 – Bob Nov 10 '20 at 15:28
  • Not my choosing but, unfortunately for me, this is my problem now. – Dean Benson Nov 10 '20 at 15:57
  • You specifically want to stay away from `.local` TLD as this is used by mDNS. – Patrick Mevzek Nov 10 '20 at 18:16
  • Many are stuck with `.local` AD domains, because someone else has chosen them many years ago. Can't blame them, either, because Microsoft has actually recommended this back then. Because this isn't about chosing the AD domain for a fresh installation and it's laborious and sometimes impossible to change it, your comments aren't helpful at all, despite you are right. – Esa Jokinen Nov 11 '20 at 06:31
  • Just wondering, why a stub and not a conditional forwarder? When you reload BIND, do you see anything in the logs regarding the new stub zone? – Tommiie Nov 12 '20 at 12:40

0 Answers0