<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 17/10/2018 12:19, Asanka Gunasekara
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:d7f57e0e-157a-49e9-bbe7-273be3f47ea8@getmailbird.com">
<div>The authoritative server has a private zone. Authoritative
server should respond/answer for queries to this private domain
if they originated from a select list of IP addresses. And a<span
style="font-size: 13.3333px;line-height: 1.5">uthoritative
server should respond/answer for queries for all other domains
normally.</span></div>
<div><span style="font-size: 13.3333px;line-height: 1.5"><br>
</span></div>
</blockquote>
When you say "all other domains", do you mean your authoritative
server is hosting authoritative information for some public domains
as well? Or only the private domain.<br>
<br>
<blockquote type="cite"
cite="mid:d7f57e0e-157a-49e9-bbe7-273be3f47ea8@getmailbird.com">
<div><span style="font-size: 13.3333px;line-height: 1.5">The
reason for forwarding all requests to the </span><span
style="font-size: 13.3333px">Authoritative server </span><span
style="font-size: 13.3333px;line-height: 1.5">is due to the
fact that this combo server should not be a public
resolver/recursor.</span></div>
</blockquote>
<p>Authoritative servers are not resolvers. So if you are hosting
public domains, the server needs to be on a public IP address and
answer on port 53.</p>
<p>If you are *only* hosting private domains, then the combination
you have shown (resolver on port 53, authoritative on port 5300)
will work. The resolver should *only* forward the private domains
to the authoritative server. Indeed, this server can sit on a
private IP address if you like.<br>
</p>
<p>Since the authoritative server is not available from the outside
world, and is not on the standard port 5300, an external DNS
tester service will not work.</p>
<p>Sending *authoritative* queries to a *recursor* is wrong.<br>
</p>
<p>Regards,</p>
<p>Brian.<br>
</p>
</body>
</html>