Sunday , July 22 2018
Home - Don't Forget! - How to use DNS Pin Point instead Split Horizon – the easy way!

How to use DNS Pin Point instead Split Horizon – the easy way!

Background on the DNS issue faced

There are times when DNS split horizon is required to point an ‘A’ record to an internal address however this normally requires you to duplicate every record in the zone on the internal DNS server.  For example autodiscover.company.com without needing the whole domain of company.com being duplicated on the internal DNS servers.

An example of an external zone for a company:

Record TypeHostAddress
Awww88.55.44.22
Amail88.55.44.23
Aremote88.55.44.60

 

The normal approach for split dns requires you to duplicate all the entires in the zone on your internal DNS server.  This is risky with changes to the public zone not always being updated on the internal zone. An example of an internal required zone design:

Record TypeHostAddress
Awww88.55.44.22
Amail88.55.44.23
Aremote10.0.40.2

The table above show how an internal zone allows for internal clients to use an internal IP address for the host name of “remote.company.com”.

The Easy Solution

If you have internal Windows Server 2012 or higher there is a easy to achieve the same results without having to duplicate all the entires.  This creates a zone and with the same name as the record for the DNS entry you are pin pointing.

First step is the creation of a DNS zone for the hostname (not the domain name zone!) with powershell command:

Add-DnsServerPrimaryZone -Name remote.company.com -ReplicationScope Forest

The second step creates a record type of ‘A’ with the same name as the DNS zone:

Add-DnsServerResourceRecordA -IPv4Address 10.0.40.2 -ZoneName remote.company.com -Name remote.company.com 

 

The much long version of how to configure this feature can be found here: https://blogs.technet.microsoft.com/undocumentedfeatures/2016/07/08/creating-a-pinpoint-dns-zone/

Check Also

Mac Outlook 2016 Screen/View Crashed and Flashing black

The Outlook 2016 client has been trusted workhorse for email since the full release.  However …

Leave a Reply

Your email address will not be published. Required fields are marked *