[Samba] Conditional forwarders

L.P.H. van Belle belle at bazuin.nl
Thu Dec 13 12:17:52 UTC 2018


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Hénoch Hervé via samba
> Verzonden: donderdag 13 december 2018 13:11
> Aan: Rowland Penny; samba at lists.samba.org
> Onderwerp: Re: [Samba] Conditional forwarders
> I've asked this question because it is the first step before domain
> approbation.
> Several questions in my message :
> 1) With Samba AD, can we via "Windows DNS Tools" set a conditional
> forwarders ?

No, you need bind9_dlz for and edit the files manualy. 

> 2) If yes, is it possible with samba internal dns ?
No, see 1. 

> 3) If we can't use "Windows DNS Tools" do we have another method to do
> "conditional forwarder" ?
Yes, see 1. 

And per example, its pretty simple also. You need something like this. 

zone "internal1.domain.tld" {
    type forward;
    forwarders {;; };

zone "0.168.192.in-addr.arpa" {
    type forward;
    forwarders {;; };

zone "domain.tld" {
    type forward;
    forwarders {;; };
// ! Please note. If this is a mail relay. Point it tot and internet DNS or get stuck with SPF/DKIM/DMARC
// for a proxy, you can set it to internal dns or external dns, depending on you needs. 
//    forwarders {;; };

And dont forget to adjust krb5.conf for a multi kerberos domain, if you use that. 

If you have a lot of request, setup caching and forwarding dns proxy. 



More information about the samba mailing list