{"id":75,"date":"2018-12-07T13:25:53","date_gmt":"2018-12-07T12:25:53","guid":{"rendered":"https:\/\/www.bsdpro.se\/?p=75"},"modified":"2021-11-19T13:43:08","modified_gmt":"2021-11-19T12:43:08","slug":"dnsmasq-cnditional-dns-forwarding-for-windows-active-directory-domains","status":"publish","type":"post","link":"https:\/\/www.bsdpro.se\/?p=75","title":{"rendered":"Dnsmasq – Conditional DNS Forwarding for Windows Active Directory Domains"},"content":{"rendered":"

Let’s say your Windows domain is “domain.local” and your Windows DNS IP address is “192.168.1.55” and “192.168.1.56”
In OpenWrt, add this to \/etc\/config\/dhcp:<\/p>\n

        option rebind_protection '0'\n        list server '\/domain.local\/192.168.1.55'
        list server '\/domain.local\/192.168.1.56'<\/pre>\n
The trick here which isn’t well documented is that rebind protection MUST be set to ‘0’ otherwise lookups for *.domain.local will fail.
UPDATE: Be sure to NOT<\/strong> have filterwin2k set in dnsmasq (\/etc\/config\/dhcp), if you do, gpupdate and AD-domain lookups will fail.<\/p>\n
Now your other computers\/devices\/servers that use the dnsmasq DNS-server can resolve computers that are AD-connected.<\/p>\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Let’s say your Windows domain is “domain.local” and your Windows DNS IP address is “192.168.1.55” and “192.168.1.56”In OpenWrt, add this to \/etc\/config\/dhcp: option rebind_protection ‘0’ list server ‘\/domain.local\/192.168.1.55’ list server ‘\/domain.local\/192.168.1.56′ The trick here which isn’t well documented is that … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-75","post","type-post","status-publish","format-standard","hentry","category-openwrt"],"_links":{"self":[{"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/posts\/75","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=75"}],"version-history":[{"count":9,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/posts\/75\/revisions"}],"predecessor-version":[{"id":184,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=\/wp\/v2\/posts\/75\/revisions\/184"}],"wp:attachment":[{"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=75"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=75"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bsdpro.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=75"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}