DNS Forwarder

Amraam · 8 Feb 2016 at 16:01

Out of curiosity, on my DNS server I'm setting up, should I set my forwarder to my ISP/Google DNS, or set it to the router's IP and have the public DNS IP set there instead?

What's the best practice, or should it not matter to much?

Armageus · 8 Feb 2016 at 16:26

Doesn't matter too much, but I am of the opinion cut out the extra step and let your DNS server forward direct to ISP/Google (rather than via a Router).

matthab · 8 Feb 2016 at 16:30

I would just send your DNS server straight out to google etc. Having another device in the loop is another thing to fail.

If you want to be really clever point at google and then someone like openDNS.

Steveocee · 8 Feb 2016 at 18:37

I use my ISP as response is faster than Google but I have Google first and ISP second on my 2nd DNS server

Caged · 8 Feb 2016 at 19:55

DNS server performs lookups on the root servers or forwards to Google/your ISP based on preference. Routers/firewalls/whatever use the internal DNS servers for lookups.

Amraam · 9 Feb 2016 at 08:53

Caged said:
DNS server performs lookups on the root servers or forwards to Google/your ISP based on preference. Routers/firewalls/whatever use the internal DNS servers for lookups.

Thanks. I was under the impression it uses forwarders, then reverts to root hints if it can't reach the DNS server or resolve the IP that way?

Caged · 9 Feb 2016 at 22:19

Yeah it will use forwarders if they are available. I was more getting at how I have things set up is that the Windows DNS servers are resolving DNS for all clients, even firewalls and switches. So you can do things like reference internal RADIUS servers and NTP sources using hostnames.

Amraam · 10 Feb 2016 at 08:02

Caged said:
Yeah it will use forwarders if they are available. I was more getting at how I have things set up is that the Windows DNS servers are resolving DNS for all clients, even firewalls and switches. So you can do things like reference internal RADIUS servers and NTP sources using hostnames.

Woops sorry, I think I've totally misread your post. I think I thought you meant it'd use root hints first, then use forwarders. I don't have as complicated a setup as you do - all I have is my server, PC, gateway/router, unmanaged switch, and a handful of wireless clients. I've configured three DNS forwarders - 8.8.8.8, 8.8.4.4 and one from OpenDNS. I haven't created an account with OpenDNS yet - presumably I'd need a static WAN IP or Dyanamic DNS for it to offer the filtering options etc?