Setting Up DNS for 3 Subdomains in OSX Capitan

I am looking at replacing my old company windows DNS server with a small macmini running either yosemite server or the new el capitan.

Right now the windows server for domain 10.0.1.x is named with a false domain name - Ie NY.Companyname.com, i never could seem to get the other 2 named subdomains to work properly which is why im looking to upgrade the server and move to mac.

Most machines in house are macs.

I have 3 subdomains behind my firewall 10.0.1.x,10.0.2.x,10.0.3.x., the firewall allows all traffic to flow between all three domains.

The subdomains name zones will be 10.0.1.X - NY.COMPANYNAME1.COM , 10.0.2.X - NY.COMPANYNAME2.COM, 10.0.3.X - NY.COMPANYNAME3.COM

I want the new DNS server to provide DNS for all 3 subdomains, and thus allow lookups/ping etc between the domains, as well as provide all 3 domains with DNS lookups to the outside world, i was planning on using the ISP providers DNS as a forwarder and also google 8.8.8.8 for help with web addresses queries.

My question is how do you set it up to allow all 3 subdomains to access the one DNS server and therefore have DNS access to all zones and wan?

Mac mini, OS X El Capitan (10.11.1), Server Version

Posted on Nov 30, 2015 7:54 AM

Reply
9 replies

Nov 30, 2015 9:04 AM in response to click3x1980

Your IP ranges 10.0.1/2/3.X are subnets, not subdomains


Also, you should post in the OS X Server group


In the DNS server settings, you need to set the desired IP address to the hostname of the service running. (Website, FTP, VPN, etc.)

Follow the Krypted guide to get started

http://krypted.com/tag/dns/



Lastly, do you really need three subnets?

How big is your organization?

Nov 30, 2015 9:17 AM in response to click3x1980

I don't believe at all that BobTheFisherman is being offensive when he says "I don't think you need a new computer/DNS server. I think you need to become more knowledgeable with respect to DNS and DNS server configuration.". I would have to agree with him.

For example what you describe are not three sub-domains they are three separate domains. Three sub-domains would look like sub1.company.com, sub2.company.com and sub3.company.com where each sub1, sub2, sub3 is a sub-domain of company.com furthermore the other issues of 10.0.1.x, 10.0.2.x and 10.0.3.x being able to communicate and ping each other is not really a DNS issue but is more a routing/firewall issue.


I will say that Apple's DNS server can handle multiple domains, even sub-domains and do this for multiple different network ranges as long as your router and firewalls allow all the networks to talk to each other. You need a router to 'route' between the different network number ranges i.e. 10.0.1.x and 10.0.2.x.


Apple's Server software is not suited to be the router although in theory it might be able to do it, more often these days this would be done by a high-end network switch.


For your information Apple's DNS server software is BIND also known as named

Nov 30, 2015 9:29 AM in response to John Lockwood

yes my bad, i was writing quickly and meant to write subnets not subdomains.

Each is a separate domain on a separate subnet, company A,company B,companyC.


Right now in terms of the router/firewall, I can mount servers from other subnets and also ping across without an issue when using the IP address and NFS or SMB or AFP.


What i wanted to make sure is if i place the DNS server on the10.0.2.x subnet that as long as my firewall is allowing traffic to freeflow between the subnets

that i can add all 3 subnets DNS queries to this machine, so that instead of mounting a share via ip address , i can use the server name.


does this make sense?

Nov 30, 2015 9:40 AM in response to click3x1980

Yes this single Apple DNS server can act as DNS server for multiple subnets. All you need to do is make sure all the devices know to use it as their DNS server which as stated by chattphotos is done in System Preferences -> Networking on a Mac, although it will be easier overall to use your DHCP server to tell all your DHCP clients Mac, PC or other, what the address of the DNS server is.


Note: The one thing Apple's DNS server is totally unsuited for is dynamic DNS. This is used in particular by Microsoft's Active Directory system. So if you are using Active Directory you would be best using Microsoft's DNS server and DHCP server.

Nov 30, 2015 10:12 AM in response to John Lockwood

Thanks John,


Quick additional question - my understanding is that Bonjour uses mDNS queries is that correct?

The Network Icon on a Mac machine will list any mac machines it sees via bonjour, does that apply to just the subnet that machine is on or is it possible to list all mac machines in the network Icon on that mac that exist in other subnets?


hopefully that makes sense

Nov 30, 2015 11:15 AM in response to click3x1980

Yes Bonjour uses mDNS aka. multicast DNS. Yes it normally only works on a single subnet.


There is a system called Wide Area Bonjour which in theory can be used across subnets, in particular the AirPort Extreme used to support this - I don't know if the latest model still does. There is also a class of products called Bonjour Gateways which are designed for enterprise i.e. 'large' networks and designed both to help reduce the potentially large amount of Bonjour traffic caused by lots of Macs, iOS devices, printers, etc. all using Bonjour and also as a way of passing Bonjour between subnets.


See http://www.aerohive.com/solutions/technology/bonjour-gateway.html

and https://meraki.cisco.com/technologies/bonjour-gateway

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Setting Up DNS for 3 Subdomains in OSX Capitan

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.