split dns configuration using bind9

November 10, 2011 at 03:24:53
Specs: ubuntu 10.04, quad
bind configuration in ubuntu 10.04. Am setting up mail server for an organization and new on configuration of bind. The mail server has got a public ip and a private(Lan). can some one help me on the configuration

See More: split dns configuration using bind9

Report •

#1
November 10, 2011 at 03:54:46
You need two DNS servers - one for the outside world and one for the lan. I guess that there's nothing to stop you running two instances of bind on the same machine, listening on different IP addresses.

Personally, I wouldn't let a machine that has access to the lan be accessible to the outside world. I would (and used to) run one DNS server in a DMZ and the other(s) on the internal network. I'd say the same for the mail server too - put it in a DMZ rather than giving it public and private addresses.


Report •

#2
November 10, 2011 at 04:14:43
Thanks ijack..for the response. Do u know something on Nating..coz i understand that the mailserver must have a public ip for the MX records to be set at the domain provider. How do i assign this two ips in the zones configuration files.I appreciate your help

Report •

#3
November 10, 2011 at 04:22:53
The mailserver does indeed need a public IP, or you can port forward from the router to port 25 on your mailserver (a safer option IMO). You can't assign both IPs in the zone configuration file (well, you can but they would be served on a round-robin basis, which wouldn't be any use). You need two separate zones; as they are both the same name that means two DNS servers. This means either two physical machines or two bind daemons on the one machine bound to different IP addresses.

Is the DNS server to be the autoritative server for your Internet domain? Most domain registrars provide DNS services in which case you would make an entry for your mail server there. That would be much easier (and, again, more secure) than running a DNS server on your lan providing services to the outside world.


Report •

Related Solutions

#4
November 10, 2011 at 05:57:06
I shall use the domain provider dns server address. since my router doesnt have a dedicated public ip because its on a shared ip from the isp..is it recommendable to have the mailserver as part of the lan...if yes how do i NAT the public ip to a private one on the LAN

Report •

#5
November 10, 2011 at 22:36:41
How can i NAT a public ip to private ip in the LAN

Report •

Ask Question