Results 1 to 4 of 4

Thread: Split Horizon DNS requirement

  1. #1
    neontangerine is offline Junior Member
    Join Date
    Sep 2010
    Posts
    9
    Rep Power
    4

    Default Split Horizon DNS requirement

    I am planning a full install of Zimbra to get ready for some testing and then hopefully migrating and moving to production. I have a question around the need to provide a split horizon or split brain DNS.

    In our situation we leverage a third party (our ISP) to handle our public DNS queries and have only an internal DNS for our local lan. This DNS also cache's outside queries. I am able to have the third party DNS handle the MX records.

    If I continue to leverage the third party DNS then I don't believe I need a split horizon DNS on the inside. Am I correct or is there something I am missing?

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,499
    Rep Power
    56

    Default

    Quote Originally Posted by neontangerine View Post
    Am I correct or is there something I am missing?
    The answer to that is, it depends. If you are behind a NAT router or firewall then you will need a Split DNS set-up including a correct /etc/hosts file (details in the Quick Start Installation Guide).
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    neontangerine is offline Junior Member
    Join Date
    Sep 2010
    Posts
    9
    Rep Power
    4

    Default

    Quote Originally Posted by phoenix View Post
    The answer to that is, it depends. If you are behind a NAT router or firewall then you will need a Split DNS set-up including a correct /etc/hosts file (details in the Quick Start Installation Guide).
    Our firewall blocks DNS queries to our server and does provide NATing. The intention is to forward the SMTP port(s), leveraging SNAT and DNAT. We already run an internal DNS whereby several internal machines are available only from the inside.

    If I query the Zimbra server (mail.domain.com) from internally by name I get the local address, if this is done from outside the firewall I get our public IP address as provided by the third-party DNS.

    Functionally this is already split horizon is it not?

    IS there something I am missing or need further?

    Am I required to permit DNS queries to my IP?

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,499
    Rep Power
    56

    Default

    Quote Originally Posted by neontangerine View Post
    Our firewall blocks DNS queries to our server and does provide NATing. The intention is to forward the SMTP port(s), leveraging SNAT and DNAT. We already run an internal DNS whereby several internal machines are available only from the inside.

    If I query the Zimbra server (mail.domain.com) from internally by name I get the local address, if this is done from outside the firewall I get our public IP address as provided by the third-party DNS.

    Functionally this is already split horizon is it not?
    Yes, it's a Split DNS set-up.

    Quote Originally Posted by neontangerine View Post
    IS there something I am missing or need further?
    No, you shouldn't need anything else. Just for confirmation you can check the configuration in the 'Verify...' section of the Split DNS article in the wiki and see if it returns the correct output (also check the hosts file configuration).
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Bind 9.3 on CentOS 5 Split DNS
    By cyberslugg in forum Installation
    Replies: 6
    Last Post: 05-12-2010, 06:20 AM
  2. [SOLVED] Split DNS - Firewall - Loops back to myself
    By ldoran@goccs.com in forum Installation
    Replies: 9
    Last Post: 09-30-2009, 09:26 AM
  3. Replies: 5
    Last Post: 08-28-2009, 09:35 AM
  4. Split DNS / CentOS 5 / x64
    By powrrrplay in forum Installation
    Replies: 10
    Last Post: 08-27-2009, 08:22 AM
  5. Replies: 15
    Last Post: 04-14-2008, 12:29 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •