<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi All,<br>
<br>
Firstly, thanks for DNSMASQ. I've used it for longer than I can remember, and it works incredibly well.<br>
<br>
I have a problem with part of our lab networking, which is using DNSMASQ. The problem is as follows.<br>
<br>
We have corporate Windows domain servers which delegate "labs.internal.company.com" to a DNSMASQ<br>
instance running on the lab gateway. <br>
<br>
This DNSMASQ instance has to run in authoritative mode otherwise we have<br>
problems with Windows DNS refusing to use it.<br>
<br>
The setup has worked well for years, until the lab network grew so big that we broke it up into sub-networks.<br>
Each sub-network has its own gateway running DNSMASQ.<br>
These sub-networks for the labs are lab1.labs.internal.company.com, lab2.labs.internal.company.com, lab3.labs.internal.company.com, etc.<br>
<br>
On the main lab gateway, I have a DNSMASQ config as below:<br>
<br>
resolv-file=/etc/resolv.conf.dnsmasq<br>
server=/lab1.labs.internal.company.com/10.64.241.1<br>
server=/lab2.labs.internal.company.com/10.64.242.1<br>
server=/lab3.labs.internal.company.com/10.64.243.1<br>
no-dhcp-interface=eno1,lo<br>
dhcp-range=10.64.0.50,10.64.0.199,12h<br>
log-queries<br>
log-facility=/var/log/dnsmasq.log<br>
log-dhcp<br>
auth-server=labs.internal.company.com<br>
auth-zone=labs.internal.company.com<br>
auth-soa=2,admin.labs.internal.company.com<br>
auth-ttl=600<br>
<br>
The main lab gateway is running DNSMASQ v2.90.<br>
<br>
The problem is that I don't get any delegated queries to the lab[123] DNSMASQ instances. <br>
When I send a DNS query to the lab gateway for a server in any of the lab[123] sub-domains, I get an immediate NXDOMAIN back. <br>
If I query the appropriate sub-domain server for the same FQDN, I get the expected reply.<br>
If I run tcpdump on the sub-domain server, I don't see any query coming in when I try to look up the FQDN on the main lab gateway, so the query isn't being passed on to the sub-domain server.<br>
<br>
I'm sure this is related to the auth-server aspect, and I've read the DNSMASQ man page and Googled, but I can't see how to get it to work.<br>
<br>
Thanks in advance for any suggestions!<br>
<br>
Roger<br>
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</body>
</html>