Split dns config
Options
I have a zywall usg20 with firmware version 3.30(BDQ.9) / 1.18 / 2016-11-22 09:50:31.
I have configured an Address/PTR record for a public available fqdn that when the users are in the office to resolve to the local server.
The public fqdn is test.myfqdn.org and is being used to map to an on premise service that the users must access remotely.
The myfqdn.org is the fqdn that serves our website.
In my record I add test.fqdn.org and the local ip of my on premise server e.g. 192.168.1.2
When I add this record the office users cannot access the myfqdn.org.
Using nslookup I access the dns server on the USG, I can resolve test.myfqdn.org but not the myfqdn.org.
I have a default forwarder with a * as Domain zone so it should have resolve.
If I remove my record then the users can resolve the myfqdn.org but the test.myfqdn.org resolves to the public ip as usual.
I have configured an Address/PTR record for a public available fqdn that when the users are in the office to resolve to the local server.
The public fqdn is test.myfqdn.org and is being used to map to an on premise service that the users must access remotely.
The myfqdn.org is the fqdn that serves our website.
In my record I add test.fqdn.org and the local ip of my on premise server e.g. 192.168.1.2
When I add this record the office users cannot access the myfqdn.org.
Using nslookup I access the dns server on the USG, I can resolve test.myfqdn.org but not the myfqdn.org.
I have a default forwarder with a * as Domain zone so it should have resolve.
If I remove my record then the users can resolve the myfqdn.org but the test.myfqdn.org resolves to the public ip as usual.
0
All Replies
-
Yes I too see the same issue on Zywall 110 on V 4.62 the bad news is it might not be fixed on your old USG.
The other way to fix this is to add Address/PTR myfqdn.org with IP along with test.myfqdn.org.
Or run your own Bind DNS.
0 -
Hi @lgtl,
This is a limitation of current DNS design.
You may create another PTR record for this.
Here’s a KB article related to that topic;
https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=015731&lang=EN
Best regards.
0 -
This limitation should be easy to fix should not a limitation to start with really.0
Categories
- All Categories
- 442 Beta Program
- 2.9K Nebula
- 219 Nebula Ideas
- 127 Nebula Status and Incidents
- 6.5K Security
- 601 USG FLEX H Series
- 344 Security Ideas
- 1.7K Switch
- 84 Switch Ideas
- 1.4K Wireless
- 52 Wireless Ideas
- 7K Consumer Product
- 298 Service & License
- 480 News and Release
- 92 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.8K FAQ
- 34 Documents
- 87 About Community
- 105 Security Highlight
Freshman Member
Guru Member
Zyxel Employee