JPM said:
Our internal AD DNS is AAA.com and external is AAA.com - how would you setup
DNS intrnally to forward request to outside AAA.com DNS if it can't find it
internally?
For that zone you will not. For that zone (AAA.com)
you will have ALL necessary records maintained manually
in two places, it's called Shadow DNS (aka Split DNS.)
The external DNS server will have ONLY those
records you wish to make publicly available.
(It is best kept with your registrar for all but the
largest Internet presence companies.)
The INTERNAL DNS server will have it's own
Primary (or AD master set) and you must not only
arrange for internal addresses to be registered
there (manually or automatically), but also manually
enter all external addresses you wish YOUR USERS
to have available.
Usually this is only a few addresses for one or two
Web, Email, and FTP servers.
