DNS Queries forwarded to active directory DNS Server does not find records



  • Hi,

    the goal i want to archive is that I could resolve IP-Adresses for hostnames of internal servers. For these szenario I have an Active Directory up and running, which also comes as a DNS Server. If I query an hostname using the internal DNS Server, everything looks fine:

    C:\Users\sschabbach>nslookup duplo 192.168.7.34
    Server:  milka.corp.fluent-software.vio
    Address:  192.168.7.34
    
    Name:    duplo.corp.fluent-software.vio
    Address:  192.168.7.33
    

    where 192.168.7.34 is the ip adress of the DNS Server.

    If I do the same from the DNS Forwarder/Resolver in pfSense I got the following output:

    C:\Users\sschabbach>nslookup duplo 192.168.7.242
    Server:  bounty.corp.fluent-software.vio
    Address:  192.168.7.242
    
    *** bounty.corp.fluent-software.vio can't find duplo: Non-existent domain
    

    For information 192.168.7.242 is the internal ip address from one of the LAN interfaces.

    Timings
    Name server 	Query time
    127.0.0.1	17 msec
    80.69.100.174	23 msec
    80.69.100.198	23 msec
    8.8.8.8	22 msec
    8.8.4.4	23 msec
    192.168.7.34	8248 msec
    
    
    

    From the DNS Diagnostics I see that it takes much time to query the internal DNS Server, but if I query the DNS Server directly everything seems smoothly.

    Any ideas on that?
    Kind regards,
    Sebastian.


  • LAYER 8 Global Moderator

    @fluentsoftware said in DNS Queries forwarded to active directory DNS Server does not find records:

    nslookup duplo 192.168.7.34

    duplo is not a fqdn... No shit your having issues with resolving it... query

    duplo.corp.fluent-software.vio

    your nslookup is adding the domain for you... set debug on it and see for yourself..


  • LAYER 8

    and for sure this dns servers known nothing about your local zone :

    80.69.100.174 23 msec
    80.69.100.198 23 msec
    8.8.8.8 22 msec
    8.8.4.4 23 msec



  • Under the DNS Resolver settings, under Domain Overrides, add your Windows domain and Windows DNS servers.



  • Wow, pretty nice support in a very little amount of time. The Trick with the Domain Overrides works well.
    Could anyone tell me what the Domain overrides does?

    Kind regards,
    Sebastian.


  • LAYER 8

    domain override forward all queries for that domain to the specified IP (it's already written in the description, i don't know what else can be added)
    The IP address is treated as the authoritative lookup server for the domain (including all of its subdomains), and other lookup servers will not be queried


Log in to reply