BIND9 CNAME to External Domain


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers BIND9 CNAME to External Domain
# 1  
Old 09-11-2014
BIND9 CNAME to External Domain

We're moving an app from a server in our domain to a server hosted by the vendor in their domain.
This app had it's own domain setup that we're authoritative for.

Do I need to create a new zone file? zone-vendor_com and set up the CNAME records in this file? Or if I can just edit the one I have?

I've set this up before by creating a new zone file and adding the CNAME records but we were authoritative for all the domains involved. This time we're not authoritative for all the domains. So I'm not sure if I need another zone file or if I can edit the one I have already.

I did do a search in the forum first and I did find some threads about pointing CNAMES to external domains, and they did say to create a new zone file. But I didn't find one that made mention about the authoritative thing. Apologies for being so thick about it.

Below is the vendors note on what DNS changes need to made:
NOTE: Vendor also provides an xxx_com domain name for your business (domain_xxx_com) but we recommend you keep your existing hostname and alter your DNS entry to point to the new domain name. We strongly recommend you CNAME alias www_mydomain_org and mydomain_org to vendor_domain_xxx_com_ And *_www_mydomain_org and *_mydomain_org to *_vendor_domain_xxx_com rather than pointing your DNS to the new IP address.

Existing zone file I've edited. If I can use this file should I delete the lines that setup the A records?
Code:
; NAMED Configuration for www_mydomain_com Domain
 ;
$TTL 6h
$ORIGIN domain_com.
@    IN    SOA     dns_server_domain_org_ postmaster_domain_org_ (
                2014090902    ; serial
                3h          ; refresh
                1h          ; retry
                1w          ; expire
                1d )         ; minimum
;
;name servers
;
        IN    NS    dns_server_domain_org_
        IN    NS    ns1_secondarynameservers_net_
        IN    NS    ns2_secondarynameservers_net_
        IN    NS    ns3_secondarynameservers_net_
;
;comment out this line the day of the switch?
        IN    A    192_168_1_55 
;

        IN    MX 5    mailserver_mydomain_org_
;
;
;comment out this line the day of the switch?
www        IN    A    192_168_1_55 
        
;comment out this line the day of the switch?
*_www_domain_org_ IN    A    192_168_1_55 

;    Aliases
;uncomment these lines the day of the switch_ 

;mydomain_org       IN CNAME   vendor_domain_xxx_com_
;www_mydomain_org   IN CNAME   vendor_domain_xxx_com_
;*_mydomain_org     IN CNAME *_vendor_domain_xxx_com_
;*_www_mydomain_org IN CNAME *_vendor_domain_xxx_com_

---------- Post updated 09-11-14 at 04:24 PM ---------- Previous update was 09-10-14 at 06:36 PM ----------

skip it I've got it sorted out.

Last edited by Don Cragun; 09-10-2014 at 09:16 PM.. Reason: Add CODE tags.
# 2  
Old 09-25-2014
If you are not authoritative for a domain, you have no files for that domain, and normally no records for its hosts in any zone (unless you need to intercept some queries behind firewalls to point them to internal IPs, where a full.dotted.name. record is used). But you could be a slave server for it, if that makes sense in the reliability and latency models.

CNAMEs are just aliases, since in a well ordered world, the A lookup for a.b.c as 1.2.3.4 is the exact reverse of the PTR lookup, and any other names must be by CNAME. If you move the server, the CNAMEs must have the new IP and reside on the authoritative master. Ditto for the A and PTR records. This might be multiple servers, but there is only one authoritative master for each.
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. IP Networking

Bind9 DNSSEC and rollerd

Hi all, I've a litte problem to get rollerd running and signing my zones if the ZSK of my zones are near expiring or expired. rollerd is running but do nothing startet with: /usr/bin/perl /usr/sbin/rollerd -rrfile /etc/bind/all.rollrec -directory /etc/bind -logfile /dev/stdout ... (1 Reply)
Discussion started by: xabbu
1 Replies

2. UNIX for Dummies Questions & Answers

Help with accessing Samba shares on external (NON-DOMAIN) webserver(s)

Hi all, You may have seen my recent topic, where I asked for help getting some samba shares to work on our network. Now that these are working, I move on to the next hurdle! We have a few externally hosted (Windows Server 2008 R2) web servers which are not on our domain, but can still... (0 Replies)
Discussion started by: mgreen81
0 Replies

3. IP Networking

Ping domain indicates the external ip address and not the local ip

when i execute from local machine ping domainname i get the external ip address but i am on local dns and i expect the local ip address.. using nslookup : no problem so i cannot find why... thanks (2 Replies)
Discussion started by: activedms
2 Replies

4. UNIX for Dummies Questions & Answers

Bind9 non existing ip , time of query

how can i set default permission for nslookup, i have in my nslookup timeout = 0 retry = 3 port = 53 but i want to set it to : timeout = 2 retry = 2 port = 53 i'm using bind9 , where can i set the default timeout for it? thanks in advance (0 Replies)
Discussion started by: prpkrk
0 Replies

5. UNIX for Dummies Questions & Answers

How to Create a new internal DNS CNAME record

I need to create a new internal DNS CNAME record called "project.omc.eod" that points to a server called SPARC27.ds.eod. This is my first time doing this and any help would be greatly appreciated. Thanks in advance (10 Replies)
Discussion started by: mikeade
10 Replies

6. UNIX for Advanced & Expert Users

Can I use bind9 to resolve only ONE hostname in a zone?

Hi there, I have the following problem. I have a Debian server with bind9. I can also use my ISP DNS server through the internet box (192.168.1.1). I would like to fool my client workstation to a local machine when they query for one specific hostname within a domain. I want to let the... (5 Replies)
Discussion started by: kokonut95
5 Replies

7. UNIX and Linux Applications

bind9 with ldap using dlz

Hello guys, can anyone help me with the below error I'm getting from bind9? I'm trying to make bind read all the zone info from openldap, I have already created the schema and I've put some info into the ldap. I have also tried to google the error with no success. I'm aware there is an problem... (1 Reply)
Discussion started by: yered
1 Replies

8. Windows & DOS: Issues & Discussions

How to: Linux BOX in Windows Domain (w/out joining the domain)

Dear Expert, i have linux box that is running in the windows domain, BUT did not being a member of the domain. as I am not the System Administrator so I have no control on the server in the network, such as modify dns entry , add the linux box in AD and domain record and so on that relevant. ... (2 Replies)
Discussion started by: regmaster
2 Replies

9. IP Networking

Conditional Forwarding using BIND9

Hello, I'm a noob when it comes to DNS and BIND9, so forgive me if my description seems pedantic: I connect to my workplace's network using VPN, which sets me up with the workplace DNS servers. Those servers manage the an internal namespace (visible only to users inside the VPN), with a... (5 Replies)
Discussion started by: neked
5 Replies

10. AIX

Problem sending mail to an external domain

On one of our AIX servers, I'm having problems sending email to an external domain. I'm not a SYSADM and not sure how to troubleshoot this issue. Any help will be greatly appreciated. The following mail components are installed on the server $ lslpp -l bos.mh Fileset ... (2 Replies)
Discussion started by: voorkey
2 Replies
Login or Register to Ask a Question