Forum Discussion

steve_88008's avatar
steve_88008
Icon for Nimbostratus rankNimbostratus
Sep 04, 2014

Authoritative Screening

i have GTMs set up for authoritative screening for internal DNS queries. clients have the pri and sec dns settings pointing to GTM listeners.   Problem encountered is when a client joins the AD d...
BIG-IP DNS
deployment
steve_88008's avatar
steve_88008
Icon for Nimbostratus rankNimbostratus
Sep 08, 2014

i thought that at first as well. I fired up wireshark and reviewed. wireshark showed the response being returned to the client as well.

 

the odd thing is if I back up one level SRV records are returned. its only with there is sub domain.

 

returns SRV records nslookup ->set type=all ->_ldap._tcp.dc._msdcs.abc123.local

 

returns no srv records, nslookup ->set type=all ->_ldap._tcp.dc._msdcs.test.abc123.local

 

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Sep 08, 2014
    But these test.abc123.local queries directly against AD are working? When looking at a tcpdump on the GTM, do you notice any difference between responses returned to the client for _ldap._tcp.dc._msdcs.abc123.local vs. _ldap._tcp.dc._msdcs.test.abc123.local?