{"id":2267,"date":"2010-01-18T17:37:19","date_gmt":"2010-01-18T17:37:19","guid":{"rendered":"http:\/\/t.motd.kr\/articles\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind"},"modified":"2022-12-28T01:44:53","modified_gmt":"2022-12-27T16:44:53","slug":"setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind","status":"publish","type":"post","link":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/","title":{"rendered":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND"},"content":{"rendered":"\n<p>When you are connected to <span class=\"caps\">VPN<\/span>, all <span class=\"caps\">DNS<\/span> queries in your system often goes to the <span class=\"caps\">DNS<\/span> server that your company runs. This is inefficient because most <span class=\"caps\">DNS<\/span> queries can be resolved by faster public <span class=\"caps\">DNS<\/span> servers such as <a href=\"http:\/\/code.google.com\/speed\/public-dns\/\">Google Public <span class=\"caps\">DNS<\/span><\/a>. If only the domain names related with your company are resolved by the private name servers, you won\u2019t have a problem browsing public web sites due to an unstable <span class=\"caps\">VPN<\/span> connection.<br>To address this issue, you can install a forwarding <span class=\"caps\">DNS<\/span> server (a.k.a. proxy <span class=\"caps\">DNS<\/span> server) in your machine or local area network. There are dedicated <span class=\"caps\">DNS<\/span> proxy servers such as <a href=\"http:\/\/www.phys.uu.nl\/~rombouts\/pdnsd.html\">pdnsd<\/a> and <a href=\"http:\/\/www.thekelleys.org.uk\/dnsmasq\/doc.html\">dnsmasq<\/a>, but I recommend to use <a href=\"https:\/\/www.isc.org\/products\/BIND\/\"><span class=\"caps\">BIND<\/span><\/a> because it was more reliable than others from my experience. Unlike the first impression, <span class=\"caps\">BIND<\/span> is very easy to configure into a forwarding <span class=\"caps\">DNS<\/span> server. Moreover, <span class=\"caps\">BIND<\/span> works fine on both <a href=\"http:\/\/alex.charrett.com\/techstuff\/bind9-win2k.html\">Windows<\/a> and Linux.<br>First, let\u2019s say we want to forward all <span class=\"caps\">DNS<\/span> queries to <a href=\"http:\/\/code.google.com\/speed\/public-dns\/\">Google Public <span class=\"caps\">DNS<\/span><\/a> (8.8.8.8 and 8.8.4.4):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># \/etc\/named.conf\noptions {\n    directory \"\/var\/named\";\n    # Hide version string for security\n    version \"not currently available\";\n    # Listen to the loopback device only\n    listen-on { 127.0.0.1; };\n    listen-on-v6 { none; }; # No IPv6\n    # Do not query from the specified source port range\n    # (Adjust depending your firewall configuration)\n\u00a0\u00a0\u00a0 use-v4-udp-ports { range 32768 65535; };\n\u00a0\u00a0\u00a0 use-v6-udp-ports { range 32768 65535; };\n    # Forward all DNS queries to the Google Public DNS.\n    forwarders { 8.8.8.8; 8.8.4.4; };\n    forward only;\n    # Expire negative answer ASAP.\n    # i.e. Do not cache DNS query failure.\n    max-ncache-ttl 3; # 3 seconds\n    # Disable non-relevant operations\n    allow-transfer { none; };\n    allow-update-forwarding { none; };\n    allow-notify { none; };\n};\n# Disable the control channel.\ncontrols { };<\/code><\/pre>\n\n\n\n<p>If you are connected to your company <span class=\"caps\">VPN<\/span> and you want to forward some <span class=\"caps\">DNS<\/span> queries for certain domains to different name servers, you can override the default settings by adding the zones for your company domains:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>... (continuing from the named.conf above) ...\n\nzone \"abc.com\" in {\n    # matches:\n    #     abc.com\n    #     intranet.abc.com\n    type forward;\n    forwarders { 192.168.1.1; 192.168.2.2; };\n};\n\nzone \"private.def.com\" in {\n    # matches:\n    #     private.def.com\n    #     mail.private.def.com\n    type forward;\n    forwarders { 172.10.1.1; 172.10.2.2; };\n};<\/code><\/pre>\n\n\n\n<p>If you don\u2019t want to forward some subdomain of the overridden zones to the private <span class=\"caps\">DNS<\/span> servers, you can insert another zone <strong>before<\/strong> the zone definitions above to override the override:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>zone \"www.abc.com\" in {\n    type forward;\n    forwarders { 8.8.8.8; 8.8.4.4; };\n}\n\nzone \"abc.com\" in { ... }<\/code><\/pre>\n\n\n\n<p>Here\u2019s my complete configuration. Please note that I replaced the domain names and the private <span class=\"caps\">DNS<\/span> server addresses with bogus values.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>options {\n    # I am running BIND on Windows without a problem. :)\n    directory \"C:\\Program Files (x86)\\BIND\\etc\";\n    version \"not currently available\";\n    listen-on { 127.0.0.1; };\n    listen-on-v6 { none; };\n \u00a0\u00a0\u00a0use-v4-udp-ports { range 32768 65535; };\n\u00a0\u00a0\u00a0 use-v6-udp-ports { range 32768 65535; };\n    forwarders { 8.8.8.8; 8.8.4.4; };\n    forward only;\n    max-ncache-ttl 3;\n    allow-transfer { none; };\n    allow-update-forwarding { none; };\n    allow-notify { none; };\n};\ncontrols { };\n# We can't resolve the VPN server names with the private\n# DNS servers before we join the VPN, so we should use\n# the public DNS to initiate VPN connection successfully.\nzone \"vpn.abc.com\" in {\n    type forward;\n    forwarders { 8.8.8.8; 8.8.4.4; };\n};\n# Our company has two top level domains: abc.com and def.com\nzone \"abc.com\" in {\n    type forward;\n    forwarders { 172.10.1.1; 10.10.2.2; };\n};\nzone \"def.com\" in {\n    type forward;\n    forwarders { 172.10.1.1; 10.10.2.2; };\n};<\/code><\/pre>\n\n\n\n<p>At last but not least, make sure to set the <span class=\"caps\">DNS<\/span> settings in your operating system to point to the <span class=\"caps\">DNS<\/span> server you\u2019ve just configured (i.e. 127.0.0.1). In Linux, you should update <tt>\/etc\/resolv.conf<\/tt> or your NetworkManager settings. In Windows, you know what to do \u2013 mess with the Control Panel. \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you are connected to VPN, all DNS queries in your system often goes to the DNS server that your company runs. This is inefficient because most DNS queries can be resolved by faster public DNS servers such as Google Public DNS. If only the domain names related with your company are resolved by the&#8230; <a class=\"more-link\" href=\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\">Continue reading <span class=\"meta-nav\">&#8594;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"yoast_head":"<title>Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day\" \/>\n<meta property=\"og:description\" content=\"When you are connected to VPN, all DNS queries in your system often goes to the DNS server that your company runs. This is inefficient because most DNS queries can be resolved by faster public DNS servers such as Google Public DNS. If only the domain names related with your company are resolved by the... Continue reading &#8594;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\" \/>\n<meta property=\"og:site_name\" content=\"T&#039;s message of the day\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/trustin\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/trustin\" \/>\n<meta property=\"article:published_time\" content=\"2010-01-18T17:37:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-12-27T16:44:53+00:00\" \/>\n<meta name=\"author\" content=\"Trustin Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/www.twitter.com\/trustin\" \/>\n<meta name=\"twitter:site\" content=\"@trustin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Trustin Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\"},\"author\":{\"name\":\"Trustin Lee\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d\"},\"headline\":\"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND\",\"datePublished\":\"2010-01-18T17:37:19+00:00\",\"dateModified\":\"2022-12-27T16:44:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\"},\"wordCount\":320,\"publisher\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\",\"url\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\",\"name\":\"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day\",\"isPartOf\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#website\"},\"datePublished\":\"2010-01-18T17:37:19+00:00\",\"dateModified\":\"2022-12-27T16:44:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/vault.motd.kr\/wordpress\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#website\",\"url\":\"https:\/\/vault.motd.kr\/wordpress\/\",\"name\":\"T's message of the day\",\"description\":\"the best is yet to come\",\"publisher\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/vault.motd.kr\/wordpress\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d\",\"name\":\"Trustin Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/vault.motd.kr\/wordpress\/wp-content\/uploads\/2020\/09\/avatar-2019-966px.png\",\"contentUrl\":\"https:\/\/vault.motd.kr\/wordpress\/wp-content\/uploads\/2020\/09\/avatar-2019-966px.png\",\"width\":966,\"height\":966,\"caption\":\"Trustin Lee\"},\"logo\":{\"@id\":\"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/image\/\"},\"sameAs\":[\"https:\/\/t.motd.kr\/\",\"https:\/\/www.facebook.com\/trustin\",\"https:\/\/www.instagram.com\/trustinlee\/\",\"https:\/\/www.linkedin.com\/in\/trustin\",\"https:\/\/twitter.com\/https:\/\/www.twitter.com\/trustin\",\"https:\/\/www.youtube.com\/@trustinlee\"]}]}<\/script>","yoast_head_json":{"title":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/","og_locale":"en_US","og_type":"article","og_title":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day","og_description":"When you are connected to VPN, all DNS queries in your system often goes to the DNS server that your company runs. This is inefficient because most DNS queries can be resolved by faster public DNS servers such as Google Public DNS. If only the domain names related with your company are resolved by the... Continue reading &#8594;","og_url":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/","og_site_name":"T&#039;s message of the day","article_publisher":"https:\/\/www.facebook.com\/trustin","article_author":"https:\/\/www.facebook.com\/trustin","article_published_time":"2010-01-18T17:37:19+00:00","article_modified_time":"2022-12-27T16:44:53+00:00","author":"Trustin Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/www.twitter.com\/trustin","twitter_site":"@trustin","twitter_misc":{"Written by":"Trustin Lee","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#article","isPartOf":{"@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/"},"author":{"name":"Trustin Lee","@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d"},"headline":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND","datePublished":"2010-01-18T17:37:19+00:00","dateModified":"2022-12-27T16:44:53+00:00","mainEntityOfPage":{"@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/"},"wordCount":320,"publisher":{"@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/","url":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/","name":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND &#8212; T&#039;s message of the day","isPartOf":{"@id":"https:\/\/vault.motd.kr\/wordpress\/#website"},"datePublished":"2010-01-18T17:37:19+00:00","dateModified":"2022-12-27T16:44:53+00:00","breadcrumb":{"@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/vault.motd.kr\/wordpress\/posts\/2267\/setting-up-a-forwarding-dns-server-or-dns-proxy-with-isc-bind\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/vault.motd.kr\/wordpress\/"},{"@type":"ListItem","position":2,"name":"Setting up a Forwarding DNS Server (or DNS Proxy) with ISC BIND"}]},{"@type":"WebSite","@id":"https:\/\/vault.motd.kr\/wordpress\/#website","url":"https:\/\/vault.motd.kr\/wordpress\/","name":"T's message of the day","description":"the best is yet to come","publisher":{"@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/vault.motd.kr\/wordpress\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/4430ad90fc2ddeef051565701d85db9d","name":"Trustin Lee","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/image\/","url":"https:\/\/vault.motd.kr\/wordpress\/wp-content\/uploads\/2020\/09\/avatar-2019-966px.png","contentUrl":"https:\/\/vault.motd.kr\/wordpress\/wp-content\/uploads\/2020\/09\/avatar-2019-966px.png","width":966,"height":966,"caption":"Trustin Lee"},"logo":{"@id":"https:\/\/vault.motd.kr\/wordpress\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/t.motd.kr\/","https:\/\/www.facebook.com\/trustin","https:\/\/www.instagram.com\/trustinlee\/","https:\/\/www.linkedin.com\/in\/trustin","https:\/\/twitter.com\/https:\/\/www.twitter.com\/trustin","https:\/\/www.youtube.com\/@trustinlee"]}]}},"_links":{"self":[{"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/posts\/2267"}],"collection":[{"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/comments?post=2267"}],"version-history":[{"count":2,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/posts\/2267\/revisions"}],"predecessor-version":[{"id":5930,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/posts\/2267\/revisions\/5930"}],"wp:attachment":[{"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/media?parent=2267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/categories?post=2267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vault.motd.kr\/wordpress\/wp-json\/wp\/v2\/tags?post=2267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}