Am I correct in assuming that DNS zone transfers cannot happens accross
different subnets ie. if you have two AD domains DNS AD int. or
Primary/secondary zones each in a different subnet.
No. What gave you that impression (we might be missing
some hidden assumption in your question)?
Also would forwarders or root hints work accross subnets
DNS is based on IP, which is routable. It doesn't use broadcasts
(which are localized to one subnet usually.)
So, if routing works and the DNS traffic isn't filtered by a firewall
(etc.) then DNS works, client to server, server to server.
Why might routing fail? Private addressing might be such a problem.
You cannot expect client access to initiate from a public addresses
through a NAT to a private address (by default.)
[/QUOTE]