Using DNS Conditional Forwarders (Windows)

Occasionally you run into the website or two that will not resolve properly usng your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresses on your local network, especially if you have multiple sub-nets or even multiple routed networks.

The better solution is to use conditional forwarders.  Conditional forwarders allow you to specify a DNS server to use for a particular domain.  In my case we had problems resolving from one of our networks.  By setting up a conditional forwarder, we were able to address the paypal problem without causing DNS resolution problems for other domains or our own networks.

Here is how its done on a Windows 2008 DNS Server:

1. Open the DNS manage from Administrative Tools int the control panel.
2. Navigate to and right click on Conditional Forwarders under your DNS Server. then select “New Conditional Forwarder”
3. Enter the Domain of the site you want to resolve using forwarders
4. Enter the DNS Server to use for resolving this domain.  I used one of Level3’s and one of Google’s in this case.  OpenDNS Servers are also a good choice.

5. If you use Active Directory, make sure you check the box to store in Active Directory.  That way the forwarder will replicate to your other DNS Servers.  The default’s are ok for the rest of the settings.

You may need to clear your DNS cache to get this working.