Dns cache shows DMZ IP 1

[minxca]

Hi,

I just took over a network. Right now our ISP host the dns,
the internal & external domain name is totally different.

I want to host our own external DNS.
I created DNS server in DMZ, using that new server, external client (testing) could access my web, mail and ftp. Then when I want to add dns zone in our internal DNS, I noticed in Internal DNS Cache that all of our hosts for external domain show their DMZ IP addresses, which is good because there is no loop but I'm so confused how come I can see the SOA (from our ISP in cache) and why i see DMZ address not external address?
Shoud I create a zone for my dmz servers in internal dns, clean the cache?


thanks,

 

[brianinms]

Unless you are a large company, meaning 1500+ users then you are better off letting your ISP host your DNS. What DNS server are you running?

 

[minxca]

Run on MS,

It's easier if we host our own dns, no need to fax them the request. When we add a host just take a minute to update.

 

[brianinms]

Yes, but if your server dies then you stop getting email. In addition they usually have dual servers in multiple locations. If you still plan on running your own DNS I would do so on a server running a flavor of Linux and bind.

 

[minxca]

Not really because the second NS would be my ISP.

 

[brianinms]

So then you should still have to fax your requests with them for additions, which brings you back full circle ... lol. However, on to your issue ... I assume you are running Windows 2003. It shouldn't be on your internal domain, nor should it be talking to your internal network. For your internal domain are you using forworders or root hints?

 

[minxca]

No need to fax, what i had done with other company, just open the tcp port for DNS Zone transfer to ISP DNS server.

It's in DMZ, doesn't talk to internal network.
My question was: why do i see SOA in internal DNS cache for my public domain?

Internal using root hints, don't really like it but i'll just leave it like this for internal.