Split DNS config question

[JohnOCFII]

Using the current Beta (3.0.0.4.378.50_beta1), my DNS configuration isn't behaving quite like I'd hoped.

I'm a recent convert from Toastman Tomato, so maybe there is a subtle difference that I'm missing.

When I define the domain name in the LAN settings field, internal hosts can be reached, but external hosts in the domain (but not internal to the Asus router) can't be resolved.

If I leave the domain name field blank, the external hosts can be reached, but the internal Linux hosts can't see the other hosts.

Can anyone see what I'm missing? I'd expect the local DNS server to respond to all the local queries, and push the unknown hosts to be responded to by the upstream external DNS servers.

Thanks,

John

 

[RMerlin]

DNS doesn't work that way.

For a given zone, you have very specific nameservers defined as being authoritative. If you use that zone internally, then ALL the entries in that zone are expected to be known by the internal name server.

This is why it is usually a bad idea to use a public zone within a LAN - you should use a private domain name, with a non-public TLD.

 

[JohnOCFII]

For a given zone, you have very specific nameservers defined as being authoritative. If you use that zone internally, then ALL the entries in that zone are expected to be known by the internal name server.

You are right, of course. I've been doing this (IP Networking) on and off for 25 years. Now it's down to just personal stuff. I should know better. That's the trouble when you switch from one environment to another -- just trying to figure out what's different, instead of thinking about what is correct.

Thankfully, changing the DNS domain info on 5 Linux VMs was easy.

Thanks,

John