I have a Windows AD domain : contoso.local
I want to forward all requests to some.contoso.local
to another DNS server through forwarding DNS server:
contoso.Local.DNS => Proxy.DNS => some.contoso.local.DNS
I can not allow direct forwarding from contoso.Local.DNS => some.contoso.local.DNS
for some reason. Proxy.DNS
is required.
The Proxy.DNS
is simple Bind9 machine with config (partial)
zone "some.contoso.local" {
type forward;
forward only;
forwarders { 1.2.3.4; }
}
On contoso.Local.DNS
there is NS record saying some.contoso.local NS ip.of.Proxy.DNS
Problem:
- When I query
a.some.contoso.local
directly throughProxy.DNS
, there is all OK. - When I query
a.some.contoso.local
throughcontoso.Local.DNS
there is query fault.
The reason I think is contoso.Local.DNS
sends query to Proxy.DNS
with flags = 0x0000
, and nslookup
client sets flags = 0x0100
. This bit means Allow recursive request
.
Can I somehow override this problem either to
- tell Windows DNS to set
Allow recursive request
bit or to - make Bind9 ignore this bit is not set
- or anyway else ?